CVE-2010-3835: Medium severity mysql vulnerability
A flaw in MySQL versions prior to 5.1.51 [1] was reported [2] that could allow an authenticated user to kill connections to MySQL. A user-variable assignment expression that is evaluated in a logical expression context can be precalculated in a temporary table for GROUP BY. However, when the expression value is used after creation of the temporary table, it was re-evaluated, not read from the table and a server crash resulted.
[1] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html [2] http://bugs.mysql.com/bug.php?id=55564
Other sources
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3835?
CVE-2010-3835 has a moderate severity rating as it allows authenticated users to terminate MySQL connections.
How do I fix CVE-2010-3835?
To fix CVE-2010-3835, upgrade to MySQL version 5.1.51 or later which addresses this vulnerability.
Which versions are affected by CVE-2010-3835?
CVE-2010-3835 affects MySQL versions prior to 5.1.51.
What type of attack can be performed due to CVE-2010-3835?
An attacker can exploit CVE-2010-3835 to kill database connections, potentially disrupting service.
Is authentication required to exploit CVE-2010-3835?
Yes, exploiting CVE-2010-3835 requires that the attacker is an authenticated user.