CVE catalog

CVE-2007-5925

mysql-dfsg-5.0 - remote denial of service

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
11.35% · Oct 25, 2026

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error. mysql DoS in the InnoDB Engine

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmysql-dfsg-5.04.05.0.32-7etch1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3~bpo31+1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3fixed
Debianmysql-dfsg3.14.0.24-10vulnerable
Debianmysql-dfsg3.14.0.24-10sarge1vulnerable
Debianmysql-dfsg3.14.0.24-10sarge2vulnerable
Debianmysql-dfsg3.14.0.24-10sarge3fixed
Debianmysql-dfsg-4.13.14.1.11a-4vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge1vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge2vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge3vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge4vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge5vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge7vulnerable
Debianmysql-dfsg-4.13.14.1.11a-4sarge8fixed
Debianmysql-dfsg-5.05.05.0.45-1+lenny1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmysql-dfsg-5.0deb4.05.0.32-7etch3Not reportedDSA-1413-1Not reported
Debianmysql-dfsgdeb3.14.0.24-10sarge3Not reportedDSA-1413-1Not reported
Debianmysql-dfsg-4.1deb3.14.1.11a-4sarge8Not reportedDSA-1413-1Not reported
Debianmysql-dfsg-5.0deb5.05.0.45-1+lenny1Not reportedDTSA-91-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References