CVE-2013-1861

medium · 5

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

CVSS

18.7%

EPSS (exploit prob.)

97th

EPSS percentile

2013-03-28

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
mariadb	mariadb	>= 5.5.0, < 5.5.32
mariadb	mariadb	>= 10.0.0, < 10.0.4
oracle	mysql	>= 5.1.0, <= 5.1.69
oracle	mysql	>= 5.5.0, <= 5.5.31
oracle	mysql	>= 5.6.0, <= 5.6.11
redhat	enterprise_linux	5
redhat	enterprise_linux	6.0
mariadb	mariadb	>= 5.5.0, < 5.5.32
mariadb	mariadb	>= 10.0.0, < 10.0.4
debian	debian_linux	7.0
canonical	ubuntu_linux	10.04
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	12.10
canonical	ubuntu_linux	13.04
opensuse	opensuse	11.4
opensuse	opensuse	12.2
opensuse	opensuse	12.3
suse	linux_enterprise_desktop	11
suse	linux_enterprise_server	11
suse	linux_enterprise_server	11
suse	linux_enterprise_software_development_kit	11

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2013-1861