LWN.net Logo

MySQL: denial of service

Package(s):mysql CVE #(s):CVE-2007-5925
Created:November 19, 2007 Updated:February 8, 2008
Description:

From the CVE entry:

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

Alerts:
SuSE SUSE-SR:2008:003 2008-02-07
Ubuntu USN-559-1 2007-12-21
Red Hat RHSA-2007:1157-01 2007-12-19
Fedora FEDORA-2007-4471 2007-12-15
Mandriva MDKSA-2007:243 2007-12-10
Fedora FEDORA-2007-4465 2007-12-15
Red Hat RHSA-2007:1155-01 2007-12-18
Gentoo 200711-25 2007-11-18
Debian DSA-1413-1 2007-11-26

(Log in to post comments)

Copyright © 2008, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds