CVE-2010-3839 — Infinite Loop in Mysql

8 documents5 sources
Severity
4.0MEDIUMNVD
EPSS
0.8%
top 25.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
MysqlOracle Mysql
Timeline
PublishedJan 14
Latest updateMay 13

Description

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDmysql/mysql6 versions+5
▶NVDoracle/mysql55 versions+54

🔴Vulnerability Details

1
GHSA
GHSA-4m2w-227w-x947: MySQL 5↗2022-05-13
▶

📋Vendor Advisories

3
Ubuntu
MySQL vulnerabilities↗2012-03-12
▶
Ubuntu
MySQL vulnerabilities↗2010-11-11
▶
Red Hat
MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)↗2010-05-10
▶

💬Community

3
Bugzilla
CVE-2010-3833 CVE-2010-3835 CVE-2010-3836 CVE-2010-3837 CVE-2010-3838 CVE-2010-3839 CVE-2010-3840 mysql various flaws [fedora-12]↗2010-10-22
▶
Bugzilla
CVE-2010-3833 CVE-2010-3835 CVE-2010-3836 CVE-2010-3839 CVE-2010-3840 mysql various flaws [fedora-13]↗2010-10-22
▶
Bugzilla
CVE-2010-3839 MySQL: server hangs during JOIN query in stored procedures called twice in a row (MySQL Bug#53544)↗2010-10-06
▶