Red Hat Security AdvisoryRHSA-2011:0164
mysql security update
Released 2011-01-18 · Red Hat rating Moderate · View on Red Hat →
Fixes 14 records
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failu…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demons…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed CWE-399
Priority LOW 33
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.12229 · Published 2011-01-11 · Fixed CWE-399
Priority LOW 32
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ...
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.1144 · Published 2011-01-11 · Fixed
Priority LOW 28
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value f…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03054 · Published 2011-01-14 · Fixed CWE-399
Priority LOW 25
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known B…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03391 · Published 2011-01-14 · Fixed
Priority LOW 25
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a quer…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03371 · Published 2011-01-14 · Fixed
Priority LOW 25
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed lis…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03391 · Published 2011-01-14 · Fixed
Priority LOW 25
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03391 · Published 2011-01-14 · Partial fix CWE-399
Priority LOW 25
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and st…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.03391 · Published 2011-01-14 · Fixed CWE-189
Priority LOW 23
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation…
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02437 · Published 2011-01-14 · Partial fix CWE-399
Priority LOW 23
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
CVSS 2.0MEDIUM 4.0· Network · Low privileges · Interaction — · EPSS 0.02337 · Published 2011-01-11 · Fixed CWE-399