SB2011011105 - Multiple vulnerabilities in Google, mysql

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011011105

SB2011011105 - Multiple vulnerabilities in Google, mysql

Published: January 11, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011011105
Severity
Low
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2010-3676)

The vulnerability allows a remote #AU# to perform service disruption.

storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement.


2) Resource management error (CVE-ID: CVE-2010-3678)

The vulnerability allows a remote #AU# to perform service disruption.

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.


3) Resource management error (CVE-ID: CVE-2010-3679)

The vulnerability allows a remote #AU# to perform service disruption.

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.


4) Input validation error (CVE-ID: CVE-2010-3680)

The vulnerability allows a remote #AU# to perform service disruption.

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.


Remediation

Install update from vendor's website.

References