← back
CVE-2010-3678

CVE-2010-3678

EPSS 12.2%
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/15467unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.mysql.com/bug.php?id=54477http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.htmlhttp://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=628172http://secunia.com/advisories/42936http://www.mandriva.com/security/advisories?name=MDVSA-2010:155http://www.mandriva.com/security/advisories?name=MDVSA-2011:012http://www.openwall.com/lists/oss-security/2010/09/28/10http://www.redhat.com/support/errata/RHSA-2011-0164.htmlhttp://www.securityfocus.com/bid/42596http://www.ubuntu.com/usn/USN-1017-1http://www.ubuntu.com/usn/USN-1397-1