CVE-2010-3837

Published: 05 November 2010

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.

Priority

Status

Package	Release	Status
mysql-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






mysql-cluster-7.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






	Patches: Upstream: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/3461.1.7

Notes

Author	Note
jdstrand	mysql-cluster-7.0 not supported per server team

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM