CVE-2010-3834

Published: 05 November 2010

Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."

Priority

Status

Package	Release	Status
mysql-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






mysql-cluster-7.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






	Patches: Upstream: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/3461.2.1 Upstream: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/3461.1.26 Upstream: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/2482 (backporting)

Notes

Author	Note
jdstrand	mysql-cluster-7.0 not supported per server team

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM