REDHAT-BUG-640819: Medium severity mysql (mysql-common) vulnerability
A flaw in MySQL versions prior to 5.1.51 [1] was reported [2] that could allow an authenticated user to kill connections to MySQL. A user-variable assignment expression that is evaluated in a logical expression context can be precalculated in a temporary table for GROUP BY. However, when the expression value is used after creation of the temporary table, it was re-evaluated, not read from the table and a server crash resulted.
[1] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html [2] http://bugs.mysql.com/bug.php?id=55564
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-640819?
The severity of REDHAT-BUG-640819 is considered high due to the potential for authenticated users to disrupt MySQL connections.
How do I fix REDHAT-BUG-640819?
To fix REDHAT-BUG-640819, upgrade your MySQL version to at least 5.1.51 or later.
Who is affected by REDHAT-BUG-640819?
Users running MySQL versions prior to 5.1.51 are affected by REDHAT-BUG-640819.
What type of vulnerability is REDHAT-BUG-640819?
REDHAT-BUG-640819 is a flaw that allows authenticated users to kill MySQL connections, which poses a risk to database availability.
Can REDHAT-BUG-640819 be exploited remotely?
No, REDHAT-BUG-640819 can only be exploited by authenticated users who have access to the MySQL server.