CVE-2007-5925

Published: Nov 10, 2007Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

Affected (1)

Products: Mysql: Mysql

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Up to 5.1.23_bk

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (56)

http://bugs.gentoo.org/show_bug.cgi?id=198988

Source: cve@mitre.org

http://bugs.mysql.com/bug.php?id=32125

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: cve@mitre.org

http://secunia.com/advisories/27568

Source: cve@mitre.org

http://secunia.com/advisories/27649

Source: cve@mitre.org

http://secunia.com/advisories/27823

Source: cve@mitre.org

http://secunia.com/advisories/28025

Source: cve@mitre.org

http://secunia.com/advisories/28040

Source: cve@mitre.org

http://secunia.com/advisories/28099

Source: cve@mitre.org

http://secunia.com/advisories/28108

Source: cve@mitre.org

http://secunia.com/advisories/28128

Source: cve@mitre.org

http://secunia.com/advisories/28838

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-25.xml

Source: cve@mitre.org

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1413

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:243

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1155.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1157.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/26353

Source: cve@mitre.org

http://www.securitytracker.com/id?1018978

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1397-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3903

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38284

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11390

Source: cve@mitre.org

https://usn.ubuntu.com/559-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=198988

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.mysql.com/bug.php?id=32125

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27568

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27649

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27823

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28025

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28040

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28099

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28108

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28128

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28838

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200711-25.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2007/dsa-1413

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2007:243

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-1155.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2007-1157.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26353

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018978

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1397-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3903

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/38284

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11390

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/559-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.