Описание
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | not-affected | 5.1.49-1ubuntu8 |
| hardy | DNE | |
| karmic | DNE | |
| lucid | DNE | |
| maverick | not-affected | 5.1.49-1ubuntu8 |
| natty | not-affected | 5.1.49-1ubuntu8 |
| oneiric | not-affected | 5.1.49-1ubuntu8 |
| upstream | released | 5.1.49 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| karmic | DNE | |
| lucid | ignored | |
| maverick | ignored | |
| natty | ignored | |
| oneiric | ignored | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | released | 5.0.22-0ubuntu6.06.15 |
| devel | DNE | |
| hardy | released | 5.0.51a-3ubuntu5.8 |
| karmic | ignored | end of life |
| lucid | DNE | |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| dapper | DNE | |
| devel | DNE | |
| hardy | DNE | |
| karmic | released | 5.1.37-1ubuntu5.5 |
| lucid | released | 5.1.41-3ubuntu12.7 |
| maverick | DNE | |
| natty | DNE | |
| oneiric | DNE | |
| upstream | released | 5.1.49 |
Показывать по
EPSS
4 Medium
CVSS2
Связанные уязвимости
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote aut ...
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
EPSS
4 Medium
CVSS2