MySQL

CVEs (133)

• CVE-2017-15945HigOct 27, 2017
  MySQL

  MySQL
  risk 0.51cvss 7.8epss 0.00

  The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera packages before 2017-09-29 have chown calls for user-writable directory trees, which allows local users to gain privileges by leveraging…

• CVE-2002-0969HigOct 11, 2002
  MySQL

  MySQL
  risk 0.51cvss 7.8epss 0.01

  Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long "datadir" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the…

• CVE-2016-1251HigNov 29, 2016
  MySQL

  MySQL
  risk 0.46cvss 8.1epss 0.03

  There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.

• CVE-2008-0226Jan 10, 2008
  MySQL

  MySQL
  risk 0.10cvss —epss 0.92

  Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrary code via (1) the ProcessOldClientHello function in handshake.cpp or (2) "input_buffer& operator>>" in yassl_imp.cpp.

• CVE-2009-4484Dec 30, 2009
  MySQL

  MySQL
  risk 0.09cvss —epss 0.70

  Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp in TaoCrypt in yaSSL before 1.9.9, as used in mysqld in MySQL 5.0.x before 5.0.90, MySQL 5.1.x before 5.1.43, MySQL 5.5.x through 5.5.0-m2, and other products, allow remote attackers to…

• CVE-2004-0627Dec 6, 2004
  MySQL

  MySQL
  risk 0.09cvss —epss 0.70

  The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.

• CVE-2003-0780Sep 22, 2003
  MySQL

  MySQL
  risk 0.09cvss —epss 0.75

  Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field.

• CVE-2003-0150Mar 24, 2003
  MySQL

  MySQL
  risk 0.07cvss —epss 0.45

  MySQL 3.23.55 and earlier creates world-writeable files and allows mysql users to gain root privileges by using the "SELECT * INFO OUTFILE" operator to overwrite a configuration file and cause mysql to run as root upon restart, as demonstrated by modifying my.cnf.

• CVE-2012-5613Dec 3, 2012
  MariaDB

  MariaDB
  risk 0.06cvss —epss 0.32

  MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege…

• CVE-2006-1518May 5, 2006
  MySQL

  MySQL
  risk 0.06cvss —epss 0.36

  Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

• CVE-2006-1516May 5, 2006
  MySQL

  MySQL
  risk 0.06cvss —epss 0.34

  The check_connection function in sql_parse.cc in MySQL 4.0.x up to 4.0.26, 4.1.x up to 4.1.18, and 5.0.x up to 5.0.20 allows remote attackers to read portions of memory via a username without a trailing null byte, which causes a buffer over-read.

• CVE-2006-3469Jul 21, 2006
  MySQL

  MySQL
  risk 0.05cvss —epss 0.27

  Format string vulnerability in time.cc in MySQL Server 4.1 before 4.1.21 and 5.0 before 1 April 2006 allows remote authenticated users to cause a denial of service (crash) via a format string instead of a date as the first parameter to the date_format function, which is later…

• CVE-2006-3081Jun 19, 2006
  MySQL

  MySQL
  risk 0.05cvss —epss 0.22

  mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

• CVE-2004-0835Nov 3, 2004
  MySQL

  MySQL
  risk 0.05cvss —epss 0.22

  MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

• CVE-2002-1375Dec 23, 2002
  MySQL

  MySQL
  risk 0.05cvss —epss 0.24

  The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x to 4.0.6, allows remote attackers to execute arbitrary code via a long response.

• CVE-2002-1374Dec 23, 2002
  MySQL

  MySQL
  risk 0.05cvss —epss 0.20

  The COM_CHANGE_USER command in MySQL 3.x before 3.23.54, and 4.x before 4.0.6, allows remote attackers to gain privileges via a brute force attack using a one-character password, which causes MySQL to only compare the provided password against the first character of the real…

• CVE-2009-5026Aug 17, 2012
  MySQL

  MySQL
  risk 0.04cvss —epss 0.08

  The executable comment feature in MySQL 5.0.x before 5.0.93 and 5.1.x before 5.1.50, when running in certain slave configurations in which the slave is running a newer version than the master, allows remote attackers to execute arbitrary SQL commands via custom comments.

• CVE-2010-3683Jan 11, 2011
  MySQL

  MySQL
  risk 0.04cvss —epss 0.12

  Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.

• CVE-2010-3682Jan 11, 2011
  MySQL

  MySQL
  risk 0.04cvss —epss 0.11

  Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in…

• CVE-2010-3681Jan 11, 2011
  MySQL

  MySQL
  risk 0.04cvss —epss 0.12

  Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.