CVE-2010-3678
Fixed in a distro release EPSS 12%
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (crash) via (1) IN or (2) CASE operations with NULL arguments that are explicitly specified or indirectly provided by the WITH ROLLUP modifier.
Products: mysql, oracle mysql
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | mysql | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-bench | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-debuginfo | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-devel | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-embedded | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-embedded-devel | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-libs | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-server | 0:5.1.52-1.el6_0.1 |
| Red Hat Enterprise Linux 6 | mysql-test | 0:5.1.52-1.el6_0.1 |