CVE-2004-2149 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Oracle Mysql

2 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
2.2%
top 15.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Mysql
Timeline
PublishedDec 31
Latest updateApr 29

Description

Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/mysql4.1.3, 4.1.4+1

Patches

Patch: securitytracker.com ↗Patch: www.securityfocus.com ↗Patch: securitytracker.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-hw54-rfjr-gw65: Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4↗2022-04-29
▶