mysql: denial of service

Package(s):

mysql-dfsg-5.0

CVE #(s):

CVE-2008-3963

Created:

November 18, 2008

Updated:

March 8, 2010

Description:

From the Ubuntu advisory: It was discovered that MySQL did not handle empty bit-string literals properly. An attacker could exploit this problem and cause the MySQL server to crash, leading to a denial of service.

Alerts:

Ubuntu	USN-1397-1	mysql-5.1, mysql-dfsg-5.0, mysql-dfsg-5.1	2012-03-12
Gentoo	201201-02	mysql	2012-01-05
rPath	rPSA-2010-0014-1	mysql	2010-03-07
Mandriva	MDVSA-2009:326	mysql	2009-12-07
CentOS	CESA-2009:1289	mysql	2009-09-15
Red Hat	RHSA-2009:1289-02	mysql	2009-09-02
Red Hat	RHSA-2009:1067-01	Red Hat Application Stack	2009-05-26
Debian	DSA-1783	mysql-dfsg-5.0	2009-04-29
Mandriva	MDVSA-2009:094	mysql	2009-04-22
Ubuntu	USN-671-1	mysql-dfsg-5.0	2008-11-17
SuSE	SUSE-SR:2009:001	ethereal/wireshark, mysql, imap, rsyslog, courier-authlib, nfs-utils, libxml2, python, jhead, git, samba, vinagre, opera	2009-01-12