Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0819

medium · 4

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.

4
CVSS
10.2%
EPSS (exploit prob.)
95th
EPSS percentile
2009-03-05
Published

AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

VendorProductAffected versions
mysqlmysql<= 5.1.32-bzr
mysqlmysql5.1.23
mysqlmysql5.1.31
mysqlmysql6.0.9
mysqlmysql6.0.10-bzr
oraclemysql5.1
oraclemysql5.1.1
oraclemysql5.1.2
oraclemysql5.1.3
oraclemysql5.1.10
oraclemysql5.1.11
oraclemysql5.1.12
oraclemysql5.1.13
oraclemysql5.1.14
oraclemysql5.1.15
oraclemysql5.1.16
oraclemysql5.1.17
oraclemysql5.1.18
oraclemysql5.1.19
oraclemysql5.1.20
oraclemysql5.1.21
oraclemysql5.1.22
oraclemysql5.1.23
oraclemysql5.1.24
oraclemysql5.1.25
oraclemysql5.1.26
oraclemysql5.1.27
oraclemysql5.1.28
oraclemysql5.1.29
oraclemysql5.1.30
oraclemysql5.1.31
oraclemysql6.0.0
oraclemysql6.0.1
oraclemysql6.0.2
oraclemysql6.0.3
oraclemysql6.0.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0819