Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-3679

medium · 4

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.

4
CVSS
12.2%
EPSS (exploit prob.)
96th
EPSS percentile
2011-01-11
Published

AV:N/AC:L/Au:S/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
mysqlmysql5.1.5
mysqlmysql5.1.23
mysqlmysql5.1.31
mysqlmysql5.1.32
mysqlmysql5.1.34
mysqlmysql5.1.37
oraclemysql5.1
oraclemysql5.1.1
oraclemysql5.1.2
oraclemysql5.1.3
oraclemysql5.1.4
oraclemysql5.1.6
oraclemysql5.1.7
oraclemysql5.1.8
oraclemysql5.1.9
oraclemysql5.1.10
oraclemysql5.1.11
oraclemysql5.1.12
oraclemysql5.1.13
oraclemysql5.1.14
oraclemysql5.1.15
oraclemysql5.1.16
oraclemysql5.1.17
oraclemysql5.1.18
oraclemysql5.1.19
oraclemysql5.1.20
oraclemysql5.1.21
oraclemysql5.1.22
oraclemysql5.1.23
oraclemysql5.1.24
oraclemysql5.1.25
oraclemysql5.1.26
oraclemysql5.1.27
oraclemysql5.1.28
oraclemysql5.1.29
oraclemysql5.1.30
oraclemysql5.1.31
oraclemysql5.1.33
oraclemysql5.1.34
oraclemysql5.1.35

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-3679