CVE-2002-1373: Medium severity oracle mysql vulnerability
Signed integer vulnerability in the COMTABLEDUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability description of CVE-2002-1373?
CVE-2002-1373 is a signed integer vulnerability in the COM_TABLE_DUMP package for MySQL that allows remote attackers to cause a denial of service by providing large negative integers to a memcpy call.
What versions of MySQL are affected by CVE-2002-1373?
CVE-2002-1373 affects MySQL versions 3.22.26 through 3.23.54.
What type of impact does CVE-2002-1373 have on MySQL?
CVE-2002-1373 can lead to a denial of service, causing mysqld to crash or hang.
How do I mitigate the risk of CVE-2002-1373?
To mitigate CVE-2002-1373, upgrade MySQL to version 3.23.54 or later.
Is CVE-2002-1373 a critical vulnerability?
CVE-2002-1373 is classified as a denial of service vulnerability, which can cause significant disruption depending on its exploitation.