Red Hat Customer Portal

Skip to main content

CVE-2010-3677

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.

Details Source

Mitre

Statement

This issue did not affect the versions of mysql as shipped with Red Hat Enterprise Linux 3 and 4. This issue was addressed in Red Hat Enterprise Linux 5 via https://rhn.redhat.com/errata/RHSA-2010-0825.html.

Public Date

2010-07-09 00:00:00

Impact

Moderate

Bugzilla

CVE-2010-3677 MySQL: Mysqld DoS (crash) by processing joins involving a table with a unique SET column (MySQL BZ#54575)

Bugzilla ID

628 040

CVSS Status

verified

Base Score

5.00

Base Metrics

AV:N/AC:L/Au:N/C:N/I:N/A:P

Red Hat Security Errata

Platform Errata Release Date
Red Hat Enterprise Linux 6 (mysql) RHSA-2011:0164 2011-01-18
Red Hat Enterprise Linux 5 (mysql) RHSA-2010:0825 2010-11-03

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 4 mysql Not affected
Red Hat Enterprise Linux 3 mysql Not affected