NetSight
IP …
medium4.0

CVE-2010-3837

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared s…

Impact

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.

Affected products

VendorProductAffected versions
MysqlMysql
Versions 5.1.5, 5.1.23, 5.1.31, 5.1.32, 5.1.34, 5.1.37
OracleMysql
Versions 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.6

Weakness classification

CWE-399

References