CVE-2007-6304: Medium severity MySQL mysql vulnerability

Published Dec 10, 2007

Updated

The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.

Affected Software

46 affected components

MySQL mysql=5.0.0

MySQL mysql=5.0.1

MySQL mysql=5.0.2

MySQL mysql=5.0.3

MySQL mysql=5.0.4

MySQL mysql=5.0.5

MySQL mysql=5.0.5.0.21

MySQL mysql=5.0.10

MySQL mysql=5.0.15

MySQL mysql=5.0.16

MySQL mysql=5.0.17

MySQL mysql=5.0.20

MySQL mysql=5.0.22.1.0.1

MySQL mysql=5.0.24

Oracle MySQL=5.0.0-alpha

Oracle MySQL=5.0.3-beta

Oracle MySQL=5.0.6

Oracle MySQL=5.0.7

Oracle MySQL=5.0.8

Oracle MySQL=5.0.9

Oracle MySQL=5.0.11

Oracle MySQL=5.0.12

Oracle MySQL=5.0.13

Oracle MySQL=5.0.14

Oracle MySQL=5.0.18

Oracle MySQL=5.0.19

Oracle MySQL=5.0.21

Oracle MySQL=5.0.22

Oracle MySQL=5.0.27

Oracle MySQL=5.0.33

Oracle MySQL=5.0.37

Oracle MySQL=5.0.41

Oracle MySQL=5.1.1

Oracle MySQL=5.1.2

Oracle MySQL=5.1.10

Oracle MySQL=5.1.11

Oracle MySQL=5.1.12

Oracle MySQL=5.1.13

Oracle MySQL=5.1.14

Oracle MySQL=5.1.15

Oracle MySQL=5.1.16

Oracle MySQL=5.1.17

Oracle MySQL=6.0.0

Oracle MySQL=6.0.1

Oracle MySQL=6.0.2

Oracle MySQL=6.0.3

Event History

Dec 10, 2007

CVE Published

09:46 PM

Dec 11, 2007

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6304?

CVE-2007-6304 has a medium severity level as it can lead to a denial of service situation.

How do I fix CVE-2007-6304?

Fixing CVE-2007-6304 involves upgrading MySQL to versions 5.0.51a, 5.1.23, or 6.0.4 or later.

Which MySQL versions are affected by CVE-2007-6304?

CVE-2007-6304 affects MySQL versions 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4.

What is the impact of CVE-2007-6304 on MySQL?

The impact of CVE-2007-6304 is that it allows remote MySQL servers to crash the federated handler and daemon.

Can CVE-2007-6304 be exploited remotely?

Yes, CVE-2007-6304 can be exploited remotely via a specially crafted SHOW TABLE STATUS query.