Patchwire CVEs, their patch status, and feeds to follow them

CVE-2007-1420

Fixed in a distro release EPSS 1%

MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.

Published 2007-03-12 · CVE record · OSV

Products: mysql, oracle mysql

Distro releases

ReleasePackageFixed in
Red Hat Enterprise Linux 5mysql0:5.0.45-7.el5
Red Hat Enterprise Linux 5mysql-bench0:5.0.45-7.el5
Red Hat Enterprise Linux 5mysql-debuginfo0:5.0.45-7.el5
Red Hat Enterprise Linux 5mysql-devel0:5.0.45-7.el5
Red Hat Enterprise Linux 5mysql-server0:5.0.45-7.el5
Red Hat Enterprise Linux 5mysql-test0:5.0.45-7.el5