Description

Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.

Remediation

References

CVE-2010-3679

Related Vulnerabilities

MySQL CVE-2020-14878 Vulnerability (CVE-2020-14878)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-6451)

WordPress Plugin JobSearch WP Job Board Security Bypass (1.8.1)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-5111)

TYPO3 Improper Input Validation Vulnerability (CVE-2014-9509)

Severity

Medium

Classification

CVE-2010-3679

Tags

Missing Update Known Vulnerabilities