CVE-2010-3840

Published: 05 November 2010

The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.

Priority

Status

Package	Release	Status
mysql-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






mysql-cluster-7.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.0 Launchpad, Ubuntu, Debian	Upstream	Needs triage






mysql-dfsg-5.1 Launchpad, Ubuntu, Debian	Upstream	Released (5.1.51)






	Patches: Upstream: http://bazaar.launchpad.net/~mysql/mysql-server/mysql-5.1/revision/3452.1.42

Notes

Author	Note
jdstrand	mysql-cluster-7.0 not supported per server team

References

Bugs

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu 14.04 Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM