CVE-2010-3682

Published: Jan 11, 2011Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.

Affected (116)

Products: Mysql: Mysql · Oracle: Mysql

1 product

1 product

Configuration A

50 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Up to 5.1.48
Mysql Mysql	Version 5.1.23
Mysql Mysql	Version 5.1.31
Mysql Mysql	Version 5.1.32
Mysql Mysql	Version 5.1.34
Mysql Mysql	Version 5.1.37
Oracle Mysql	Version 5.1.10
Oracle Mysql	Version 5.1.11
Oracle Mysql	Version 5.1.12
Oracle Mysql	Version 5.1.13
Oracle Mysql	Version 5.1.14
Oracle Mysql	Version 5.1.15
Oracle Mysql	Version 5.1.16
Oracle Mysql	Version 5.1.17
Oracle Mysql	Version 5.1.18
Oracle Mysql	Version 5.1.19
Oracle Mysql	Version 5.1.1
Oracle Mysql	Version 5.1.20
Oracle Mysql	Version 5.1.21
Oracle Mysql	Version 5.1.22
Oracle Mysql	Version 5.1.23 a
Oracle Mysql	Version 5.1.24
Oracle Mysql	Version 5.1.25
Oracle Mysql	Version 5.1.26
Oracle Mysql	Version 5.1.27
Oracle Mysql	Version 5.1.28
Oracle Mysql	Version 5.1.29
Oracle Mysql	Version 5.1.2
Oracle Mysql	Version 5.1.30
Oracle Mysql	Version 5.1.31 sp1
Oracle Mysql	Version 5.1.33
Oracle Mysql	Version 5.1.34 sp1
Oracle Mysql	Version 5.1.35
Oracle Mysql	Version 5.1.36
Oracle Mysql	Version 5.1.37 sp1
Oracle Mysql	Version 5.1.38
Oracle Mysql	Version 5.1.39
Oracle Mysql	Version 5.1.3
Oracle Mysql	Version 5.1.40
Oracle Mysql	Version 5.1.40 sp1
Oracle Mysql	Version 5.1.41
Oracle Mysql	Version 5.1.42
Oracle Mysql	Version 5.1.43
Oracle Mysql	Version 5.1.43 sp1
Oracle Mysql	Version 5.1.44
Oracle Mysql	Version 5.1.45
Oracle Mysql	Version 5.1.46
Oracle Mysql	Version 5.1.46 sp1
Oracle Mysql	Version 5.1.47
Oracle Mysql	Version 5.1.4

Configuration B

66 vulnerable

Vulnerable Software	Affected Versions
Mysql Mysql	Up to 5.0.91
Mysql Mysql	Version 5.0.0
Mysql Mysql	Version 5.0.10
Mysql Mysql	Version 5.0.15
Mysql Mysql	Version 5.0.16
Mysql Mysql	Version 5.0.17
Mysql Mysql	Version 5.0.1
Mysql Mysql	Version 5.0.20
Mysql Mysql	Version 5.0.24
Mysql Mysql	Version 5.0.2
Mysql Mysql	Version 5.0.30
Mysql Mysql	Version 5.0.36
Mysql Mysql	Version 5.0.44
Mysql Mysql	Version 5.0.54
Mysql Mysql	Version 5.0.56
Mysql Mysql	Version 5.0.60
Mysql Mysql	Version 5.0.66
Mysql Mysql	Version 5.0.72
Mysql Mysql	Version 5.0.74
Mysql Mysql	Version 5.0.82
Mysql Mysql	Version 5.0.84
Mysql Mysql	Version 5.0.87
Oracle Mysql	Version 5.0.28
Oracle Mysql	Version 5.0.30 sp1
Oracle Mysql	Version 5.0.32
Oracle Mysql	Version 5.0.34
Oracle Mysql	Version 5.0.36 sp1
Oracle Mysql	Version 5.0.38
Oracle Mysql	Version 5.0.40
Oracle Mysql	Version 5.0.41
Oracle Mysql	Version 5.0.42
Oracle Mysql	Version 5.0.44 sp1
Oracle Mysql	Version 5.0.45
Oracle Mysql	Version 5.0.46
Oracle Mysql	Version 5.0.48
Oracle Mysql	Version 5.0.50
Oracle Mysql	Version 5.0.51 a
Oracle Mysql	Version 5.0.51 b
Oracle Mysql	Version 5.0.52
Oracle Mysql	Version 5.0.56 sp1
Oracle Mysql	Version 5.0.58
Oracle Mysql	Version 5.0.62
Oracle Mysql	Version 5.0.64
Oracle Mysql	Version 5.0.66 a
Oracle Mysql	Version 5.0.66 sp1
Oracle Mysql	Version 5.0.67
Oracle Mysql	Version 5.0.68
Oracle Mysql	Version 5.0.70
Oracle Mysql	Version 5.0.72 sp1
Oracle Mysql	Version 5.0.74 sp1
Oracle Mysql	Version 5.0.75
Oracle Mysql	Version 5.0.76
Oracle Mysql	Version 5.0.77
Oracle Mysql	Version 5.0.78
Oracle Mysql	Version 5.0.79
Oracle Mysql	Version 5.0.80
Oracle Mysql	Version 5.0.81
Oracle Mysql	Version 5.0.82 sp1
Oracle Mysql	Version 5.0.83
Oracle Mysql	Version 5.0.84 sp1
Oracle Mysql	Version 5.0.85
Oracle Mysql	Version 5.0.86
Oracle Mysql	Version 5.0.87 sp1
Oracle Mysql	Version 5.0.88
Oracle Mysql	Version 5.0.89
Oracle Mysql	Version 5.0.90