CVE-2004-0837
LOW severity · CVSS 2.6
2.6CVSS LOW
Summary
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
Impact & exploitability
Attack vectorNetwork
Attack complexityHigh
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)5%
AV:N/AC:H/Au:N/C:N/I:N/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://bugs.mysql.com/2408Advisory
- http://lists.mysql.com/internals/16168Advisory
- http://lists.mysql.com/internals/16173Advisory
- http://lists.mysql.com/internals/16174Advisory
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892
- http://marc.info/?l=bugtraq&m=110140517515735&w=2Advisory
- http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15
- http://secunia.com/advisories/12783/Advisory