Description

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.

Remediation

References

CVE-2007-6304

Related Vulnerabilities

Liferay Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-13445)

Joomla Improper Privilege Management Vulnerability (CVE-2012-1563)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-4301)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2018-11325)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-7062)

Severity

Medium

Classification

CVE-2007-6304

Tags

Missing Update Known Vulnerabilities