CVE-2009-0819: Medium severity MySQL mysql vulnerability
sql/itemxmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MySQLto a version that resolves this vulnerability.Fixed in 5.1.32 - Upgrade
Upgrade
MySQLto a version that resolves this vulnerability.Fixed in 6.0.10
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0819?
CVE-2009-0819 has been classified as a denial of service vulnerability that can lead to application crashes.
How do I fix CVE-2009-0819?
To fix CVE-2009-0819, upgrade MySQL to version 5.1.32 or later for 5.1 series, and to version 6.0.10 or later for 6.0 series.
Which versions of MySQL are affected by CVE-2009-0819?
CVE-2009-0819 affects MySQL versions 5.1.23 through 5.1.31 and 6.0.0 through 6.0.9.
What types of attacks does CVE-2009-0819 allow?
CVE-2009-0819 allows remote authenticated users to exploit the vulnerability to cause a denial of service by crashing the MySQL server.
Can CVE-2009-0819 be exploited remotely?
Yes, CVE-2009-0819 can be exploited remotely by authenticated users of the MySQL server.