SB2011011107 - Multiple vulnerabilities in Google, mysql

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2011011107

SB2011011107 - Multiple vulnerabilities in Google, mysql

Published: January 11, 2011 Updated: August 11, 2020

Security Bulletin ID SB2011011107
Severity
Low
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Input validation error (CVE-ID: CVE-2010-3681)

The vulnerability allows a remote #AU# to perform service disruption.

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.


2) Input validation error (CVE-ID: CVE-2010-3683)

The vulnerability allows a remote #AU# to perform service disruption.

Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.


Remediation

Install update from vendor's website.

References