REDHAT-BUG-628172: Medium severity MySQL mysql vulnerability
A denial of service flaw was found in the way MySQL processed SQL queries containing IN or CASE statements, when NULL argument was provided as one of the arguments to the query. A remote MySQL user could use this flaw to cause myqld daemon crash (dereference a NULL pointer).
References: [1] http://secunia.com/advisories/41048/ [2] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
Upstream bug report: [3] http://bugs.mysql.com/bug.php?id=54477
Upstream changeset: [4] http://lists.mysql.com/commits/111814
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-628172?
The severity of REDHAT-BUG-628172 is classified as a denial of service vulnerability.
How do I fix REDHAT-BUG-628172?
To fix REDHAT-BUG-628172, upgrade your MySQL installation to version 5.1.49 or later.
Who is affected by REDHAT-BUG-628172?
Users of MySQL versions prior to 5.1.49 are affected by REDHAT-BUG-628172.
Can a remote user exploit REDHAT-BUG-628172?
Yes, a remote MySQL user can exploit REDHAT-BUG-628172 to crash the myqld daemon.
What causes the issue in REDHAT-BUG-628172?
The issue in REDHAT-BUG-628172 is caused by MySQL improperly processing SQL queries with NULL arguments in IN or CASE statements.