CVE-2013-1861
NoneCVSS
—
EPSS
18.8%
Published
Mar 28, 2013
CISA due date
—
The record
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:6.0 | mysql-5.1 | 0 | 5.1.72-2 |
| Debian:7 | mysql-5.5 | 0 | 5.5.33+dfsg-0+wheezy1 |
| Red Hat:enterprise_linux:6::client | mysql | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-bench | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-debuginfo | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-embedded | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-embedded-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-libs | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-server | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::client | mysql-test | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-bench | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-debuginfo | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-embedded-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-libs | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-server | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::computenode | mysql-test | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-bench | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-debuginfo | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-embedded | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-embedded-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-libs | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-server | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::server | mysql-test | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-bench | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-debuginfo | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-embedded-devel | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-libs | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-server | 0 | 0:5.1.71-1.el6 |
| Red Hat:enterprise_linux:6::workstation | mysql-test | 0 | 0:5.1.71-1.el6 |
Related vulnerabilities
- CVE-2014-0001 Buffer overflow in client/mysql.cc in Oracle MySQL and MariaDB before 5.5.35 allows… Also affects mysql-5.1
- CVE-2012-5611 Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other… Also affects mysql-5.1
- CVE-2012-2122 sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before… Also affects mysql-5.1
- CVE-2017-3302 Crash in libmysqlclient.so in Oracle MySQL before 5.6.21 and 5.7.x before 5.7.5 and… Also affects mysql-5.5
- CVE-2016-5584 Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and… Also affects mysql-5.5
- CVE-2016-6662 Oracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB… Also affects mysql-5.5
- CVE-2016-3521 Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and… Also affects mysql-5.5
- CVE-2015-4870 Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and… Also affects mysql-5.5