REDHAT-BUG-628192: Medium severity MySQL mysql vulnerability

Published Aug 28, 2010

Updated

A denial of service was found in the way MySQL processed creation of temporary tables, when the InnoDB storage engine was used. A remote authenticated MySQL user could use this flaw to cause mysqld daemon abort (assertion failure).

References: [1] http://secunia.com/advisories/41048/ [2] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html

Upstream bug report: [3] http://bugs.mysql.com/bug.php?id=54044

Note: This issue only causes a temporary denial of service, as the mysql daemon shipped with Red Hat Enterprise Linux 5 will be automatically restarted after the abort.

Affected Software

1 affected component

MySQL mysql

Event History

Aug 28, 2010

Data Sourced

02:13 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-628192?

The severity of REDHAT-BUG-628192 is classified as a denial of service vulnerability.

How does REDHAT-BUG-628192 affect MySQL users?

REDHAT-BUG-628192 can lead to the MySQL daemon aborting when processing certain temporary table creations.

Who is affected by the REDHAT-BUG-628192 vulnerability?

Remote authenticated MySQL users are affected by the REDHAT-BUG-628192 vulnerability.

How can I mitigate the risk of REDHAT-BUG-628192?

Mitigation for REDHAT-BUG-628192 involves upgrading to a patched version of MySQL that addresses this denial of service flaw.

What versions of MySQL are impacted by REDHAT-BUG-628192?

The vulnerability in REDHAT-BUG-628192 affects MySQL installations using the InnoDB storage engine.