Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-3837


MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.


Published

2011-01-14T19:02:43.437

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-399

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mysql mysql 5.1.5 Yes
Application mysql mysql 5.1.23 Yes
Application mysql mysql 5.1.31 Yes
Application mysql mysql 5.1.32 Yes
Application mysql mysql 5.1.34 Yes
Application mysql mysql 5.1.37 Yes
Application oracle mysql 5.1 Yes
Application oracle mysql 5.1.1 Yes
Application oracle mysql 5.1.2 Yes
Application oracle mysql 5.1.3 Yes
Application oracle mysql 5.1.4 Yes
Application oracle mysql 5.1.6 Yes
Application oracle mysql 5.1.7 Yes
Application oracle mysql 5.1.8 Yes
Application oracle mysql 5.1.9 Yes
Application oracle mysql 5.1.10 Yes
Application oracle mysql 5.1.11 Yes
Application oracle mysql 5.1.12 Yes
Application oracle mysql 5.1.13 Yes
Application oracle mysql 5.1.14 Yes
Application oracle mysql 5.1.15 Yes
Application oracle mysql 5.1.16 Yes
Application oracle mysql 5.1.17 Yes
Application oracle mysql 5.1.18 Yes
Application oracle mysql 5.1.19 Yes
Application oracle mysql 5.1.20 Yes
Application oracle mysql 5.1.21 Yes
Application oracle mysql 5.1.22 Yes
Application oracle mysql 5.1.23 Yes
Application oracle mysql 5.1.24 Yes
Application oracle mysql 5.1.25 Yes
Application oracle mysql 5.1.26 Yes
Application oracle mysql 5.1.27 Yes
Application oracle mysql 5.1.28 Yes
Application oracle mysql 5.1.29 Yes
Application oracle mysql 5.1.30 Yes
Application oracle mysql 5.1.31 Yes
Application oracle mysql 5.1.33 Yes
Application oracle mysql 5.1.34 Yes
Application oracle mysql 5.1.35 Yes
Application oracle mysql 5.1.36 Yes
Application oracle mysql 5.1.37 Yes
Application oracle mysql 5.1.38 Yes
Application oracle mysql 5.1.39 Yes
Application oracle mysql 5.1.40 Yes
Application oracle mysql 5.1.40 Yes
Application oracle mysql 5.1.41 Yes
Application oracle mysql 5.1.42 Yes
Application oracle mysql 5.1.43 Yes
Application oracle mysql 5.1.43 Yes
Application oracle mysql 5.1.44 Yes
Application oracle mysql 5.1.45 Yes
Application oracle mysql 5.1.46 Yes
Application oracle mysql 5.1.46 Yes
Application oracle mysql 5.1.47 Yes
Application oracle mysql 5.1.48 Yes
Application oracle mysql 5.1.49 Yes
Application oracle mysql 5.1.49 Yes
Application oracle mysql 5.1.50 Yes
Application oracle mysql 5.5.0 Yes
Application oracle mysql 5.5.1 Yes
Application oracle mysql 5.5.2 Yes
Application oracle mysql 5.5.3 Yes
Application oracle mysql 5.5.4 Yes
Application oracle mysql 5.5.5 Yes
Application mysql mysql 5.0.0 Yes
Application mysql mysql 5.0.1 Yes
Application mysql mysql 5.0.2 Yes
Application mysql mysql 5.0.3 Yes
Application mysql mysql 5.0.4 Yes
Application mysql mysql 5.0.5 Yes
Application mysql mysql 5.0.5.0.21 Yes
Application mysql mysql 5.0.10 Yes
Application mysql mysql 5.0.15 Yes
Application mysql mysql 5.0.16 Yes
Application mysql mysql 5.0.17 Yes
Application mysql mysql 5.0.20 Yes
Application mysql mysql 5.0.22.1.0.1 Yes
Application mysql mysql 5.0.24 Yes
Application mysql mysql 5.0.30 Yes
Application mysql mysql 5.0.36 Yes
Application mysql mysql 5.0.44 Yes
Application mysql mysql 5.0.45b Yes
Application mysql mysql 5.0.54 Yes
Application mysql mysql 5.0.56 Yes
Application mysql mysql 5.0.60 Yes
Application mysql mysql 5.0.66 Yes
Application mysql mysql 5.0.82 Yes
Application mysql mysql 5.0.84 Yes
Application mysql mysql 5.0.87 Yes
Application oracle mysql 5.0.0 Yes
Application oracle mysql 5.0.3 Yes
Application oracle mysql 5.0.6 Yes
Application oracle mysql 5.0.7 Yes
Application oracle mysql 5.0.8 Yes
Application oracle mysql 5.0.9 Yes
Application oracle mysql 5.0.11 Yes
Application oracle mysql 5.0.12 Yes
Application oracle mysql 5.0.13 Yes
Application oracle mysql 5.0.14 Yes
Application oracle mysql 5.0.18 Yes
Application oracle mysql 5.0.19 Yes
Application oracle mysql 5.0.21 Yes
Application oracle mysql 5.0.22 Yes
Application oracle mysql 5.0.23 Yes
Application oracle mysql 5.0.25 Yes
Application oracle mysql 5.0.26 Yes
Application oracle mysql 5.0.27 Yes
Application oracle mysql 5.0.30 Yes
Application oracle mysql 5.0.32 Yes
Application oracle mysql 5.0.33 Yes
Application oracle mysql 5.0.37 Yes
Application oracle mysql 5.0.38 Yes
Application oracle mysql 5.0.41 Yes
Application oracle mysql 5.0.42 Yes
Application oracle mysql 5.0.45 Yes
Application oracle mysql 5.0.50 Yes
Application oracle mysql 5.0.51 Yes
Application oracle mysql 5.0.52 Yes
Application oracle mysql 5.0.67 Yes
Application oracle mysql 5.0.75 Yes
Application oracle mysql 5.0.77 Yes
Application oracle mysql 5.0.81 Yes
Application oracle mysql 5.0.83 Yes
Application oracle mysql 5.0.85 Yes
Application oracle mysql 5.0.86 Yes
Application oracle mysql 5.0.88 Yes
Application oracle mysql 5.0.89 Yes
Application oracle mysql 5.0.90 Yes
Application oracle mysql 5.0.91 Yes

References