CVE-2010-3677
N/A
Published: January 11, 2011 at 07:00 PM UTC
Updated: June 16, 2026 at 11:23 PM UTC
2 products affected across 2 vendorsMySQL ServerMySQL
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a join query that uses a table with a unique SET column.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
95%
5.0.285.0.30 sp15.0.325.0.345.0.36 sp15.0.385.0.405.0.415.0.425.0.44 sp15.0.455.0.465.0.485.0.505.0.51 a5.0.51 b5.0.525.0.56 sp15.0.585.0.625.0.645.0.66 a5.0.66 sp15.0.675.0.685.0.705.0.72 sp15.0.74 sp15.0.755.0.765.0.775.0.785.0.795.0.805.0.815.0.82 sp15.0.835.0.84 sp15.0.855.0.865.0.87 sp15.0.885.0.895.0.905.1.15.1.105.1.115.1.125.1.135.1.145.1.155.1.165.1.175.1.185.1.195.1.25.1.205.1.215.1.225.1.23 a5.1.245.1.255.1.265.1.275.1.285.1.295.1.35.1.305.1.31 sp15.1.335.1.34 sp15.1.355.1.365.1.37 sp15.1.385.1.395.1.45.1.405.1.40 sp15.1.415.1.425.1.435.1.43 sp15.1.445.1.455.1.465.1.46 sp15.1.47
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (25)
Vendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.htmlVendor Advisoryx_refsource_SUSE
Source: [email protected]
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.htmlThird Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/42875Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/42936Quick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card