CVE-2007-2583
published 2007-05-10CVE-2007-2583: The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of…
PriorityP417medium4CVSS 2.0
AVNACLAuSCNINAP
EXPLOIT
EPSS
11.31%
95.4th percentile
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| oracle | mysql | < 5.0.40 | 5.0.40 |
| oracle | mysql | 5.1 – 5.1.17 | — |
CVSS provenance
nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:P
vendor_redhat4.0MEDIUM
vendor_ubuntu4.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
MySQL vulnerabilities
vendor_ubuntu·2007-10-11·CVSS 4.0
CVE-2007-3782 [MEDIUM] MySQL vulnerabilities
Title: MySQL vulnerabilities
Summary: MySQL vulnerabilities
Neil Kettle discovered that MySQL could be made to dereference a NULL
pointer and divide by zero. An authenticated user could exploit this
with a crafted IF clause, leading to a denial of service. (CVE-2007-2583)
Victoria Reznichenko discovered that MySQL did not always require the
DROP privilege. An authenticated user could exploit this via RENAME
TABLE statements to rename arbitrary tables, possibly gaining additional
database access. (CVE-2007-2691)
It was discovered that MySQL could be made to overflow a signed char
during authentication. Remote attackers could use crafted authentication
requests to cause a denial of service. (CVE-2007-3780)
Phil Anderton discovered that MySQL did not properly verify access
privileges whe
Red Hat
mysql: DoS via statement with crafted IF clause
vendor_redhat·2007-03-29·CVSS 4.0
CVE-2007-2583 [MEDIUM] mysql: DoS via statement with crafted IF clause
mysql: DoS via statement with crafted IF clause
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
Statement: This issue did not affect mysql packages as shipped in Red Hat Enterprise Linux 2.1, 3, and 4.
GHSA
GHSA-hf23-jpgj-4fhg: The in_decimal::set function in item_cmpfunc
ghsa_unreviewed·2022-05-01
CVE-2007-2583 [MEDIUM] GHSA-hf23-jpgj-4fhg: The in_decimal::set function in item_cmpfunc
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
No detection rules found.
http://bugs.mysql.com/bug.php?id=27513http://lists.mysql.com/commits/23685http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlhttp://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.htmlhttp://secunia.com/advisories/25188http://secunia.com/advisories/25196http://secunia.com/advisories/25255http://secunia.com/advisories/25389http://secunia.com/advisories/25946http://secunia.com/advisories/27155http://secunia.com/advisories/27823http://secunia.com/advisories/28838http://secunia.com/advisories/30351http://security.gentoo.org/glsa/glsa-200705-11.xmlhttp://www.debian.org/security/2007/dsa-1413http://www.exploit-db.com/exploits/30020http://www.mandriva.com/security/advisories?name=MDKSA-2007:139http://www.osvdb.org/34734http://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/bid/23911http://www.trustix.org/errata/2007/0017/http://www.vupen.com/english/advisories/2007/1731https://exchange.xforce.ibmcloud.com/vulnerabilities/34232https://issues.rpath.com/browse/RPL-1356https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930https://usn.ubuntu.com/528-1/http://bugs.mysql.com/bug.php?id=27513http://lists.mysql.com/commits/23685http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlhttp://packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.htmlhttp://secunia.com/advisories/25188http://secunia.com/advisories/25196http://secunia.com/advisories/25255http://secunia.com/advisories/25389http://secunia.com/advisories/25946http://secunia.com/advisories/27155http://secunia.com/advisories/27823http://secunia.com/advisories/28838http://secunia.com/advisories/30351http://security.gentoo.org/glsa/glsa-200705-11.xmlhttp://www.debian.org/security/2007/dsa-1413http://www.exploit-db.com/exploits/30020http://www.mandriva.com/security/advisories?name=MDKSA-2007:139http://www.osvdb.org/34734http://www.redhat.com/support/errata/RHSA-2008-0364.htmlhttp://www.securityfocus.com/bid/23911http://www.trustix.org/errata/2007/0017/http://www.vupen.com/english/advisories/2007/1731https://exchange.xforce.ibmcloud.com/vulnerabilities/34232https://issues.rpath.com/browse/RPL-1356https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930https://usn.ubuntu.com/528-1/
2007-05-10
Published