REDHAT-BUG-628680: Medium severity MySQL mysql vulnerability

Published Aug 30, 2010

Updated

A denial of service flaw was found in the way MySQL processed alternate read requests from two indexes on a table using the HANDLER interface. A remote, authenticated MySQL user could use this flaw to cause mysqld daemon abort.

References: [1] http://secunia.com/advisories/41048/ [2] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html

Upstream bug report: [3] http://bugs.mysql.com/bug.php?id=54007

Upstream commit: [4] http://lists.mysql.com/commits/110598

Affected Software

1 affected component

MySQL mysql

Event History

Aug 30, 2010

Data Sourced

06:14 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-628680?

The severity of REDHAT-BUG-628680 is categorized as a denial of service flaw that can lead to mysqld daemon aborting.

How do I fix REDHAT-BUG-628680?

To fix REDHAT-BUG-628680, it is recommended to upgrade to the latest patched version of MySQL.

What versions of MySQL are affected by REDHAT-BUG-628680?

REDHAT-BUG-628680 affects MySQL versions that utilize the HANDLER interface when processing alternate read requests.

Who can exploit REDHAT-BUG-628680?

A remote, authenticated MySQL user can exploit REDHAT-BUG-628680 to cause the MySQL daemon to abort.

What type of attack does REDHAT-BUG-628680 represent?

REDHAT-BUG-628680 represents a denial of service attack, affecting the stability of the MySQL server.