CVE-2010-1849
N/A
Published: June 7, 2010 at 08:00 PM UTC
Updated: June 16, 2026 at 11:19 PM UTC
2 products affected across 2 vendorsMySQL ServerMySQL
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 4%
Description
The my_net_skip_rest function in sql/net_serv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a large number of packets that exceed the maximum length.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
5.0.0 alpha5.0.115.0.125.0.135.0.145.0.185.0.195.0.215.0.225.0.235.0.275.0.3 beta5.0.335.0.375.0.415.0.455.0.515.0.65.0.675.0.75.0.755.0.775.0.85.0.815.0.835.0.855.0.865.0.885.0.895.0.95.0.905.0.915.15.1.15.1.105.1.115.1.125.1.135.1.145.1.155.1.165.1.175.1.25.1.35.1.305.1.335.1.355.1.365.1.385.1.395.1.45.1.405.1.415.1.425.1.435.1.445.1.455.1.465.1.65.1.75.1.85.1.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
- http://www.mandriva.com/security/advisories?name=MDVSA-2010:107
- http://www.ubuntu.com/usn/USN-1397-1
References (12)
Vendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.htmlQuick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card