Vulnerabilities > Oracle > Mysql > 5.1.4

DATE CVE VULNERABILITY TITLE RISK
2012-01-18 CVE-2012-0075 Remote MySQL Server vulnerability in Oracle MySQL
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.0.x, 5.1.x, and 5.5.x allows remote authenticated users to affect integrity via unknown vectors.
network
high complexity
mysql oracle
1.7
2012-01-18 CVE-2011-2262 Remote MySQL Server vulnerability in Oracle MySQL
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.x and 5.5.x allows remote attackers to affect availability via unknown vectors.
network
low complexity
mysql oracle
5.0
2011-01-14 CVE-2010-3840 Denial Of Service vulnerability in Oracle MySQL Prior to 5.1.51
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
network
low complexity
mysql oracle
4.0
2011-01-14 CVE-2010-3839 Denial Of Service vulnerability in Oracle MySQL Prior to 5.1.51
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
network
low complexity
mysql oracle
4.0
2011-01-14 CVE-2010-3838 Denial Of Service vulnerability in Oracle MySQL Prior to 5.1.51
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a query that uses the (1) GREATEST or (2) LEAST function with a mixed list of numeric and LONGBLOB arguments, which is not properly handled when the function's result is "processed using an intermediate temporary table."
network
low complexity
mysql oracle
4.0
2011-01-14 CVE-2010-3837 Resource Management Errors vulnerability in multiple products
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-14 CVE-2010-3836 Resource Management Errors vulnerability in multiple products
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (assertion failure and server crash) via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers.
network
low complexity
mysql oracle CWE-399
4.0
2011-01-14 CVE-2010-3835 Numeric Errors vulnerability in multiple products
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
network
low complexity
mysql oracle CWE-189
4.0
2011-01-14 CVE-2010-3834 Denial Of Service vulnerability in Oracle MySQL Prior to 5.1.51
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
network
low complexity
mysql oracle
4.0
2011-01-14 CVE-2010-3833 Resource Management Errors vulnerability in multiple products
MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ...
network
low complexity
mysql oracle CWE-399
5.0