Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2010-3676 — Reachable Assertion in Mysql

6 documents5 sources

Severity

4.0MEDIUMNVD

EPSS

3.1%

top 13.23%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Mysql Oracle Mysql

Timeline

PublishedJan 11

Latest updateMay 13

Description

storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (assertion failure) by modifying the (1) innodb_file_format or (2) innodb_file_per_table configuration parameters for the InnoDB storage engine, then executing a DDL statement.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/mysql47 versions+46

▶NVDmysql/mysql6 versions+5

🔴Vulnerability Details

GHSA

GHSA-2f85-2599-xgq8: storage/innobase/dict/dict0crea↗2022-05-13

▶

💥Exploits & PoCs

Exploit-DB

Oracle MySQL < 5.1.49 - 'DDL' Statements Denial of Service↗2010-07-09

▶

📋Vendor Advisories

Red Hat

MySQL: mysqld DoS (assertion failure) after changing InnoDB storage engine configuration parameters (MySQL bug #55039)↗2010-07-09

▶

💬Community

Bugzilla

CVE-2010-3676 CVE-2010-3677 CVE-2010-3678 CVE-2010-3679 CVE-2010-3680 CVE-2010-3681 CVE-2010-3682 CVE-2010-3683 mysql various flaws [fedora-all]↗2010-09-23

▶

Bugzilla

CVE-2010-3676 MySQL: mysqld DoS (assertion failure) after changing InnoDB storage engine configuration parameters (MySQL bug #55039)↗2010-08-30

▶