Home > Vulnerability Database > CVE-2009-4019

Mend.io Vulnerability Database

CVE-2009-4019

Date: November 30, 2009

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Severity Score

4.3

Related Resources (25)

Url: http://secunia.com/advisories/38517

Url: http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html

Url: http://marc.info/?l=oss-security&m=125901161824278&w=2

Url: http://www.redhat.com/support/errata/RHSA-2010-0109.html

Url: http://marc.info/?l=oss-security&m=125881733826437&w=2

Url: http://secunia.com/advisories/37717

Url: https://bugzilla.redhat.com/show_bug.cgi?id=540906

Url: http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2009-4019

Url: http://support.apple.com/kb/HT4077

Url: http://secunia.com/advisories/38573

Url: https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00764.html

Url: http://www.vupen.com/english/advisories/2010/1107

Url: http://bugs.mysql.com/48291

Url: http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8500

Url: http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Url: https://access.redhat.com/security/cve/CVE-2009-4019

Url: http://bugs.mysql.com/47780

Url: http://www.ubuntu.com/usn/USN-1397-1

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11349

Url: http://ubuntu.com/usn/usn-897-1

Url: http://marc.info/?l=oss-security&m=125883754215621&w=2

Url: http://www.debian.org/security/2010/dsa-1997

Url: https://www.mend.io/vulnerability-database/CVE-2009-4019

Severity Score

4.3

CVSS v3.1

Base Score:	4.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	LOW

CVSS v2

Base Score:	4.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2009-4019

Date: November 30, 2009

Severity Score

Related Resources (25)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?