REDHAT-BUG-640856: Medium severity mysql (mysql-common) vulnerability
A flaw in MySQL versions prior to 5.1.51 [1] was reported [2] that could allow an authenticated user to kill connections to MySQL by using GROUPCONCAT() together with 'WITH ROLLUP'.
[1] http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html [2] http://bugs.mysql.com/bug.php?id=54476
This is noted as having been fixed in MySQL 5.1.51, but it does not cause a crash on MySQL 5.0.50 in Fedora 13. It also causes a crash on Red Hat Enterprise Linux 5 (5.0.77) but not Red Hat Enterprise Linux 4 (4.1.22). GROUPCONCAT() support looks to have been added in MySQL 4.1, so Red Hat Enterprise Linux 3 is not affected.
A patch for this flaw is included in the upstream report.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-640856?
The severity of REDHAT-BUG-640856 is classified as moderate due to its potential impact on authenticated users.
How do I fix REDHAT-BUG-640856?
To fix REDHAT-BUG-640856, upgrade to MySQL version 5.1.51 or higher.
Who is affected by REDHAT-BUG-640856?
Users of MySQL versions prior to 5.1.51 are affected by REDHAT-BUG-640856.
Can unauthorized users exploit REDHAT-BUG-640856?
No, REDHAT-BUG-640856 requires authentication, allowing only authenticated users to exploit it.
What functionality is compromised by REDHAT-BUG-640856?
REDHAT-BUG-640856 compromises the ability of authenticated users to terminate MySQL connections using GROUP_CONCAT() with 'WITH ROLLUP'.