NetSight
IP …
medium5.0Public exploit code

CVE-2013-1861

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

Affected products

VendorProductAffected versions
MariadbMariadb
from 5.5.0 before 5.5.32
from 10.0.0 before 10.0.4
OracleMysql
from 5.1.0 through 5.1.69
from 5.5.0 through 5.5.31
from 5.6.0 through 5.6.11
RedhatEnterprise Linux
Versions 5, 6.0
DebianDebian Linux
Version 7.0
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
OpensuseOpensuse
Versions 11.4, 12.2, 12.3
SuseLinux Enterprise Desktop
Version 11
SuseLinux Enterprise Server
Version 11
SuseLinux Enterprise Software Development Kit
Version 11

Weakness classification

CWE-119

References