CVSS: 6.5EPSS: 1%CPEs: 130EXPL: 0CVE-2010-3837 – MySQL: crash when group_concat and "with rollup" in prepared statements (MySQL Bug#54476)
https://notcve.org/view.php?id=CVE-2010-3837
14 Jan 2011 — MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object. MySQL v5.0 antes de v5.0.92, v5.1 antes de v5.1.51, y v5.5 antes de v5.5.6 permiten a usuarios remotos autenticados causar una denegación de servicio (por caída del s... • http://bugs.mysql.com/bug.php?id=54476 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 8%CPEs: 130EXPL: 0CVE-2010-3833 – MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826)
https://notcve.org/view.php?id=CVE-2010-3833
14 Jan 2011 — MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT." MySQL v5.0 antes de v5.0.92, v5.1 antes de v5.1.51, y v5.5 antes de v5.5.6 no propaga adecuadamente los errores de tipo, lo cual permite provocar a atacantes remotos una denegación de servi... • http://bugs.mysql.com/bug.php?id=55826 • CWE-399: Resource Management Errors •
CVSS: 6.5EPSS: 1%CPEs: 130EXPL: 0CVE-2010-3838 – MySQL: crash with LONGBLOB and union or update with subquery (MySQL Bug#54461)
https://notcve.org/view.php?id=CVE-2010-3838
14 Jan 2011 — MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table." MySQL v5.0 antes de v5.0.92, v5.1 antes de v5.1.51, y v5.5 antes de v5.5.6 permite a usuarios remotos autenticados causar una denegación de serv... • http://bugs.mysql.com/bug.php?id=54461 •
CVSS: 6.5EPSS: 1%CPEs: 65EXPL: 0CVE-2010-3835 – MySQL: crash with user variables, assignments, joins... (MySQL Bug #55564)
https://notcve.org/view.php?id=CVE-2010-3835
14 Jan 2011 — MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table. MySQL versiones 5.1 anteriores a 5.1.51 y versiones 5.5 anteriores a 5.5.6, permite a... • http://bugs.mysql.com/bug.php?id=55564 • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 1%CPEs: 130EXPL: 0CVE-2010-3834
https://notcve.org/view.php?id=CVE-2010-3834
14 Jan 2011 — Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments." Vulnerabilidad no especificada en MySQL v5.0 antes de v5.0.92, v5.1 antes de v5.1.51, y v5.5 antes de v5.5.6 permite a usuarios remotos autenticados causar una denegación de servicio (por caída del servidor)... • http://bugs.mysql.com/bug.php?id=55568 •
CVSS: 6.5EPSS: 1%CPEs: 65EXPL: 0CVE-2010-3839 – MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)
https://notcve.org/view.php?id=CVE-2010-3839
14 Jan 2011 — MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements. MySQL v5.1 antes de v5.1.51 y v5.5 antes de v5.5.6 permite a usuarios remotos autenticados causar una denegación de servicio (por un bucle infinito) a través de varias invocaciones de (1) un procedimiento preparado o (2) un procedimiento almacenado que crea una... • http://bugs.mysql.com/bug.php?id=53544 •
CVSS: 6.5EPSS: 1%CPEs: 130EXPL: 0CVE-2010-3836 – MySQL: pre-evaluating LIKE arguments in view prepare mode causes crash (MySQL Bug#54568)
https://notcve.org/view.php?id=CVE-2010-3836
14 Jan 2011 — MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers. MySQL v5.0 antes de v5.0.92, v5.1 antes de v5.1.51, y v5.5 antes de v5.5.6 permite a usuarios remotos autenticados causar una denegación de servicio (por un error de aserción y consiguiente caída del servidor) a través de vectores relacionados con la p... • http://bugs.mysql.com/bug.php?id=54568 • CWE-399: Resource Management Errors •
CVSS: 6.5EPSS: 1%CPEs: 59EXPL: 0CVE-2010-3840 – MySQL: crash when loading data into geometry function PolyFromWKB() (MySQL Bug#51875)
https://notcve.org/view.php?id=CVE-2010-3840
14 Jan 2011 — The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points. La función Gis_line_string::init_from_wkb en el archivo sql/spatial.cc en MySQL versiones 5.1 anteriores a 5.1.51, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del s... • http://bugs.mysql.com/bug.php?id=51875 •
CVSS: 6.5EPSS: 7%CPEs: 116EXPL: 2CVE-2010-3677 – MySQL: Mysqld DoS (crash) by processing joins involving a table with a unique SET column (MySQL BZ#54575)
https://notcve.org/view.php?id=CVE-2010-3677
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column. MySQL de Oracle versiones 5.1 anteriores a 5.1.49 y versiones 5.0 anteriores a 5.0.92, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo del demonio de mysqld) por medio de una consulta join que utiliza una tabla con una columna SET única. • http://bugs.mysql.com/bug.php?id=54575 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 11%CPEs: 56EXPL: 4CVE-2010-3678 – Oracle MySQL < 5.1.49 - 'WITH ROLLUP' Denial of Service
https://notcve.org/view.php?id=CVE-2010-3678
11 Jan 2011 — Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier. MySQL de Oracle versiones 5.1 anteriores a 5.1.49, permite a los usuarios autenticados remotos causar una denegación de servicio (bloqueo) por medio de operaciones (1) IN o (2) CASE con argumentos NULL que son especificados explícitamente o indirectamente proporcionados por... • https://www.exploit-db.com/exploits/15467 • CWE-399: Resource Management Errors •