CVE-2010-3835 Denial of service in n/a
Authenticated users can crash the MySQL server by exploiting a logic error in temporary table expression evaluation during GROUP BY operations.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2010-3835?
CVE-2010-3835 is a medium-severity denial of service vulnerability in Mysql Mysql, published on 14 Jan 2011. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.
Weakness: CWE-189
Which versions are affected by CVE-2010-3835?
It affects 2 products.
Products include Mysql Mysql, Oracle Mysql.
How do I fix CVE-2010-3835?
Upgrade to a fixed version.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2010-3835 being exploited?
There is no known exploitation of CVE-2010-3835 in the wild and no public exploit code.
Other vulnerabilities in Mysql Mysql
Sources
Also known as GHSA-r74g-jppv-888f.