Oval Definition:oval:org.mitre.oval:def:13602
Revision Date:2014-06-30Version:19
Title:USN-1017-1 -- mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities
Description:It was discovered that MySQL incorrectly handled certain requests with the UPGRADE DATA DIRECTORY NAME command. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled joins involving a table with a unique SET column. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled NULL arguments to IN or CASE operations. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled malformed arguments to the BINLOG statement. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled the use of TEMPORARY InnoDB tables with nullable columns. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled alternate reads from two indexes on a table using the HANDLER interface. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled use of EXPLAIN with certain queries. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 6.06 LTS, 8.04 LTS, 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled error reporting when using LOAD DATA INFILE and would incorrectly raise an assert in certain circumstances. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 9.10 and 10.04 LTS. It was discovered that MySQL incorrectly handled propagation during evaluation of arguments to extreme-value functions. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 8.04 LTS, 9.10, 10.04 LTS and 10.10. It was discovered that MySQL incorrectly handled materializing a derived table that required a temporary table for grouping. An authenticated user could exploit this to make MySQL crash, causing a denial of service. It was discovered that MySQL incorrectly handled certain user-variable assignment expressions that are evaluated in a logical expression context. An authenticated user could exploit this to make MySQL crash, causing a denial of service. This issue only affected Ubuntu 8.04 LTS, 9.10, 10.04 LTS and 10.10. It was discovered that MySQL incorrectly handled pre-evaluation of LIKE predicates during view preparation. An authenticated user could exploit this to make MySQL crash, causing a denial of service. It was discovered that MySQL incorrectly handled using GROUP_CONCAT and WITH ROLLUP together. An authenticated user could exploit this to make MySQL crash, causing a denial of service. It was discovered that MySQL incorrectly handled certain queries using a mixed list of numeric and LONGBLOB arguments to the GREATEST or LEAST functions. An authenticated user could exploit this to make MySQL crash, causing a denial of service. It was discovered that MySQL incorrectly handled queries with nested joins when used from stored procedures and prepared statements. An authenticated user could exploit this to make MySQL hang, causing a denial of service. This issue only affected Ubuntu 9.10, 10.04 LTS and 10.10. It was discovered that MySQL incorrectly handled improper WKB data passed to the PolyFromWKB function. An authenticated user could exploit this to make MySQL crash, causing a denial of service
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2010-2008
CVE-2010-3677
CVE-2010-3678
CVE-2010-3679
CVE-2010-3680
CVE-2010-3681
CVE-2010-3682
CVE-2010-3683
CVE-2010-3833
CVE-2010-3834
CVE-2010-3835
CVE-2010-3836
CVE-2010-3837
CVE-2010-3838
CVE-2010-3839
CVE-2010-3840
USN-1017-1
USN-1017-1
Platform(s):Ubuntu 10.04
Ubuntu 10.10
Ubuntu 6.06
Ubuntu 8.04
Ubuntu 9.10
Product(s):mysql-5.1
mysql-dfsg-5.0
mysql-dfsg-5.1
Definition Synopsis
  • Release section
  • Ubuntu 8.04 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • mysql-client DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR mysql-common DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR mysql-server DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is i386
  • OR Installed architecture is powerpc
  • OR Installed architecture is sparc
  • OR Installed architecture is lpia
  • AND Packages section
  • libmysqlclient15-dev DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR mysql-client-5.0 DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR mysql-server-5.0 DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR libmysqlclient15off DPKG is earlier than 5.0.51a-3ubuntu5.8
  • OR Release section
  • Ubuntu 10.10 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • mysql-client DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR libmysqlclient16-dev DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-common DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-server DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is powerpc
  • OR Installed architecture is armel
  • OR Installed architecture is amd64
  • OR Installed architecture is i386
  • AND Packages section
  • libmysqlclient-dev DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR libmysqld-pic DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-client-core-5.1 DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-client-5.1 DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR libmysqlclient16 DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-testsuite DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-server-5.1 DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR libmysqld-dev DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR mysql-server-core-5.1 DPKG is earlier than 5.1.49-1ubuntu8.1
  • OR Release section
  • Ubuntu 10.04 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • mysql-client DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR libmysqlclient16-dev DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-common DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-server DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is powerpc
  • OR Installed architecture is armel
  • OR Installed architecture is amd64
  • OR Installed architecture is i386
  • AND Packages section
  • libmysqlclient-dev DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR libmysqld-pic DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-client-core-5.1 DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-client-5.1 DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR libmysqlclient16 DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-testsuite DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-server-5.1 DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR libmysqld-dev DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR mysql-server-core-5.1 DPKG is earlier than 5.1.41-3ubuntu12.7
  • OR Release section
  • Ubuntu 9.10 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • mysql-client DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR libmysqlclient16-dev DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR mysql-common DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR mysql-server DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is amd64
  • OR Installed architecture is sparc
  • OR Installed architecture is powerpc
  • OR Installed architecture is i386
  • OR Installed architecture is armel
  • OR Installed architecture is lpia
  • AND Packages section
  • libmysqlclient-dev DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR libmysqld-pic DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR mysql-client-5.1 DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR libmysqlclient16 DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR mysql-server-5.1 DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR libmysqld-dev DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR mysql-server-core-5.1 DPKG is earlier than 5.1.37-1ubuntu5.5
  • OR Release section
  • Ubuntu 6.06 is installed
  • AND Architecture section
  • Architecture independet section
  • Installed architecture is all
  • AND Packages section
  • mysql-client DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR mysql-common DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR mysql-server DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR Architecture depended section
  • Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is powerpc
  • OR Installed architecture is amd64
  • OR Installed architecture is i386
  • AND Packages section
  • libmysqlclient15-dev DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR mysql-client-5.0 DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR libmysqlclient15off DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • OR mysql-server-5.0 DPKG is earlier than 5.0.22-0ubuntu6.06.15
  • BACK