CVE-Katalog

CVE-2009-4019

libmysqlclient-devel-10.0.22-3.8 on GA media

[CVE-Katalog]

Schweregrad
Unbekannt
Published
Updated
Source
[NVD] · [CVE record]
EPSS
16.26% · Oct 22, 2026

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement. mysql: DoS (crash) when comparing GIS items from subquery and when handling subqueires in WHERE and assigning a SELECT result to a @variable The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmysql-dfsg-5.04.05.0.32-7etch1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch10vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch11vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch3~bpo31+1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch4vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch5vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch5~bpo31+1vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch6vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch8vulnerable
Debianmysql-dfsg-5.04.05.0.32-7etch12fixed
Debianmysql-dfsg-5.05.05.0.51a-23vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny1~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2+spu1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny2~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24~bpo40+1vulnerable
Debianmysql-dfsg-5.05.05.0.51a-24+lenny3fixed
Opensusemariadbtumbleweed10.0.22-3.8fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmysql-dfsg-5.0deb4.05.0.32-7etch12Not reportedDSA-1997-1Not reported
Debianmysql-dfsg-5.0deb5.05.0.51a-24+lenny3Not reportedDSA-1997-1Not reported
Opensusemariadbrpmtumbleweed10.0.22-3.8Not reportedOPENSUSE-SU-2024:10153-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libmariadbd19]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [libmariadbd-devel]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-bench]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-client]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-errormessages]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · noarch · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-galera]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-rpm-macros]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-test]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb-tools]Unbekannt

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Unbekannt · Behoben: 10.0.22-3.8

      Version impact unknown

      pypi · mariadb · opensuse · tumbleweed

  • [mariadb]Behoben

    Quellpaket: [mariadb]

    Details (1)

    • 12.3.2-1.3 · x86_64 · tumbleweed

      Behoben · Behoben: 10.0.22-3.8

      pypi · mariadb · opensuse · tumbleweed

Beobachtet:

Referenzen

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]