Skip to main content
← All vulnerabilities
CVE-2010-3681

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.

Timeline

  1. Public exploit on Exploit-DB

    EDB-34520

  2. CVE published
  3. Record last updated
  4. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • n/a n/a

    Version range not reported

References 26

bugzilla.redhat.com

ubuntu.com

secunia.com

redhat.com

turbolinux.co.jp

dev.mysql.com

mandriva.com

exchange.xforce.ibmcloud.com

vupen.com

bugs.mysql.com

debian.org

lists.opensuse.org

securityfocus.com

openwall.com

Exploit-DB