CVE-2009-0819

Published: Mar 5, 2009Modified: Apr 23, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.

Affected (36)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

36 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Up to 5.1.32-bzr
Mysql Mysql	Version 5.1.23
Mysql Mysql	Version 5.1.31
Mysql Mysql	Version 6.0.10-bzr
Mysql Mysql	Version 6.0.9
Oracle Mysql	Version 5.1.10
Oracle Mysql	Version 5.1.11
Oracle Mysql	Version 5.1.12
Oracle Mysql	Version 5.1.13
Oracle Mysql	Version 5.1.14
Oracle Mysql	Version 5.1.15
Oracle Mysql	Version 5.1.16
Oracle Mysql	Version 5.1.17
Oracle Mysql	Version 5.1.18
Oracle Mysql	Version 5.1.19
Oracle Mysql	Version 5.1.1
Oracle Mysql	Version 5.1.20
Oracle Mysql	Version 5.1.21
Oracle Mysql	Version 5.1.22
Oracle Mysql	Version 5.1.23 a
Oracle Mysql	Version 5.1.24
Oracle Mysql	Version 5.1.25
Oracle Mysql	Version 5.1.26
Oracle Mysql	Version 5.1.27
Oracle Mysql	Version 5.1.28
Oracle Mysql	Version 5.1.29
Oracle Mysql	Version 5.1.2
Oracle Mysql	Version 5.1.30
Oracle Mysql	Version 5.1.31 sp1
Oracle Mysql	Version 5.1.3
Oracle Mysql	Version 5.1
Oracle Mysql	Version 6.0.0
Oracle Mysql	Version 6.0.1
Oracle Mysql	Version 6.0.2
Oracle Mysql	Version 6.0.3
Oracle Mysql	Version 6.0.4