CVE-2010-3840: Medium severity mysql vulnerability
A flaw in MySQL versions prior to 5.1.51 [1] was reported [2] that could allow an authenticated user to cause the MySQL server to crash when improper WKB data was passed to the PolyFromWKB() function.
There is an upstream patch [3] to correct the issue.
[1] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html [2] http://bugs.mysql.com/bug.php?id=51875 [3] http://lists.mysql.com/commits/117094
Other sources
The Gislinestring::initfromwkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3840?
CVE-2010-3840 is rated as a moderate severity vulnerability that can crash the MySQL server.
How do I fix CVE-2010-3840?
To fix CVE-2010-3840, upgrade MySQL to version 5.1.51 or later.
Which versions of MySQL are affected by CVE-2010-3840?
CVE-2010-3840 affects MySQL versions prior to 5.1.51.
What is the impact of CVE-2010-3840?
The impact of CVE-2010-3840 is that an authenticated user can cause the MySQL server to crash.
Is there an upstream patch available for CVE-2010-3840?
Yes, there is an upstream patch available to correct the CVE-2010-3840 vulnerability.