Description

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Remediation

References

CVE-2009-4019

Related Vulnerabilities

PrestaShop Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-13461)

WordPress Plugin AppPresser-Mobile App Framework Security Bypass (4.3.2)

OpenSSL Other Vulnerability (CVE-2003-0543)

Zenphoto Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-5593)

MySQL CVE-2011-2262 Vulnerability (CVE-2011-2262)

Severity

Medium

Classification

CVE-2009-4019

Tags

Missing Update Known Vulnerabilities