CVE catalog

CVE-2010-3833

mysql-dfsg-5.0 - several vulnerabilities

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.05% · Oct 25, 2026

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 does not properly propagate type errors, which allows remote attackers to cause a denial of service (server crash) via crafted arguments to extreme-value functions such as (1) LEAST and (2) GREATEST, related to KILL_BAD_DATA and a "CREATE TABLE ... SELECT." MySQL: CREATE TABLE ... SELECT causes crash when KILL_BAD_DATA is returned (MySQL Bug#55826) The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmysql-dfsg-5.05.05.0.51a-23vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny1~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2+spu1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny3vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny4vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmysql-dfsg-5.0deb5.05.0.51a-24+lenny5Not reportedDSA-2143-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References