Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

mysql: denial of service

Package(s):

mysql

CVE #(s):

CVE-2007-1420

Created:

March 22, 2007

Updated:

May 21, 2008

Description:

MySQL subselect queries using "ORDER BY" can be used by an attacker with access to a MySQL instance in order to create an intermittent denial of service.

Alerts:

Red Hat	RHSA-2008:0364-01	2008-05-21
Mandriva	MDKSA-2007:139	2007-07-04
rPath	rPSA-2007-0107-1	2007-05-23
Gentoo	200705-11	2007-05-08
Ubuntu	USN-440-1	2007-03-21

(Log in to post comments)