CVE-2010-3681: Medium severity MySQL mysql vulnerability
A denial of service flaw was found in the way MySQL processed alternate read requests from two indexes on a table using the HANDLER interface. A remote, authenticated MySQL user could use this flaw to cause mysqld daemon abort.
References: [1] http://secunia.com/advisories/41048/ [2] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
Upstream bug report: [3] http://bugs.mysql.com/bug.php?id=54007
Upstream commit: [4] http://lists.mysql.com/commits/110598
Other sources
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3681?
The severity of CVE-2010-3681 is categorized as moderate due to its denial of service impact.
How do I fix CVE-2010-3681?
To fix CVE-2010-3681, upgrade MySQL to version 5.1.49 or later.
What software versions are affected by CVE-2010-3681?
CVE-2010-3681 affects MySQL versions 5.1.5 through 5.1.48.
Can CVE-2010-3681 be exploited remotely?
Yes, CVE-2010-3681 can be exploited by a remote, authenticated MySQL user.
What is the impact of CVE-2010-3681?
The impact of CVE-2010-3681 is the potential for the mysqld daemon to abort, resulting in a denial of service.