CVE-2007-5925
NoneCVSS
—
EPSS
11.4%
Published
Nov 10, 2007
CISA due date
—
The record
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | mysql-dfsg | 0 | 4.0.24-10sarge3 |
| Debian:3.1 | mysql-dfsg-4.1 | 0 | 4.1.11a-4sarge8 |
| Debian:4.0 | mysql-dfsg-5.0 | 0 | 5.0.32-7etch3 |
| Debian:5.0 | mysql-dfsg-5.0 | 0 | 5.0.45-1+lenny1 |
| Red Hat:enterprise_linux:4::as | mysql | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | mysql-bench | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | mysql-debuginfo | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | mysql-devel | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::as | mysql-server | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | mysql | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | mysql-bench | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | mysql-debuginfo | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | mysql-devel | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::desktop | mysql-server | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | mysql | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | mysql-bench | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | mysql-debuginfo | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | mysql-devel | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::es | mysql-server | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | mysql | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | mysql-bench | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | mysql-debuginfo | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | mysql-devel | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:4::ws | mysql-server | 0 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
| Red Hat:enterprise_linux:5::client | mysql | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | mysql-bench | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | mysql-debuginfo | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | mysql-devel | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | mysql-server | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client | mysql-test | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-bench | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-debuginfo | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-devel | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-server | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::client_workstation | mysql-test | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql-bench | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql-debuginfo | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql-devel | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql-server | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:enterprise_linux:5::server | mysql-test | 0 | 0:5.0.22-2.2.el5_1.1 |
| Red Hat:rhel_application_stack:1 | mysql | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-bench | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-cluster | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-debuginfo | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-devel | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-libs | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-server | 0 | 0:5.0.44-2.el4s1.1 |
| Red Hat:rhel_application_stack:1 | mysql-test | 0 | 0:5.0.44-2.el4s1.1 |
Related vulnerabilities
- CVE-2007-3780 MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service… Also affects mysql-dfsg
- CVE-2007-2583 The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before… Also affects mysql-dfsg
- CVE-2006-1516 The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to… Also affects mysql-dfsg
- CVE-2006-1518 Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20… Also affects mysql-dfsg
- CVE-2006-3469 Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1… Also affects mysql-dfsg-4.1
- CVE-2006-3081 mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows… Also affects mysql-dfsg-4.1
- CVE-2009-4484 Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp… Also affects mysql-dfsg-5.0
- CVE-2009-4019 mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle… Also affects mysql-dfsg-5.0