medium4.0Public exploit code

CVE-2009-4019

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

MySQL 6.0.9 - 'GeomFromWKB()' Function First Argument Geometry Value Handling Denial of Service2009-11-23 · dos · linux · Verified
MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service2009-11-23 · dos · linux · Verified

Impact

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Affected products

Vendor	Product	Affected versions
Mysql	Mysql	Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5
Oracle	Mysql	Versions 5.0.0, 5.0.3, 5.0.6, 5.0.7, 5.0.8, 5.0.11

Public exploit code

Impact

Affected products

References