Back to Database
Status published
Medium
CVE-2010-1849
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91...
Vulnerability Description
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2010-1849
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.ubuntu.com/usn/USN-1397-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7328
- http://bugs.mysql.com/bug.php?id=50974
- http://support.apple.com/kb/HT4435
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://dev.mysql.com/doc/refman/5.1/en/news-5-1-47.html
- http://lists.mysql.com/commits/106060
- http://securitytracker.com/id?1024032
- http://dev.mysql.com/doc/refman/5.0/en/news-5-0-91.html
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:107
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
More from mysql
View All →CVE-2013-1492
Buffer overflow in yaSSL, as used in MySQL 5.1.x before...
High
7.5
CVE-2012-2749
MySQL 5.1.x before 5.1.63 and 5.5.x before 5.5.24 allows remote...
Medium
4
CVE-2012-2102
MySQL 5.1.x before 5.1.62 and 5.5.x before 5.5.22 allows remote...
Low
3.5
CVE-2012-1696
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium
4
CVE-2012-0583
Unspecified vulnerability in the MySQL Server component in Oracle MySQL...
Medium
4
Affected Vendor
mysql
View all reports →Affected Software
mysql
Vulnerable Versions:
5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.5.0.21, 5.0.10, 5.0.15, 5.0.16, 5.0.17, 5.0.20, 5.0.24, 5.0.45b, 5.0.82, 5.0.84, 5.0.87, 5.1.5, 5.1.23, 5.1.31, 5.1.32, 5.1.34, 5.1.37, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.18, 5.0.19, 5.0.21, 5.0.22, 5.0.23, 5.0.27, 5.0.33, 5.0.37, 5.0.41, 5.0.45, 5.0.51, 5.0.67, 5.0.75, 5.0.77, 5.0.81, 5.0.83, 5.0.85, 5.0.86, 5.0.88, 5.0.89, 5.0.90, 5.0.91, 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.6, 5.1.7, 5.1.8, 5.1.9, 5.1.10, 5.1.11, 5.1.12, 5.1.13, 5.1.14, 5.1.15, 5.1.16, 5.1.17, 5.1.30, 5.1.33, 5.1.35, 5.1.36, 5.1.38, 5.1.39, 5.1.40, 5.1.41, 5.1.42, 5.1.43, 5.1.44, 5.1.45, 5.1.46
Timeline
Official Publish:
June 7th, 2010
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.