Test Kennung:	1.3.6.1.4.1.25623.1.0.801573
Kategorie:	Databases
Titel:	MySQL 'Gis_line_string::init_from_wkb()' DOS Vulnerability
Zusammenfassung:	MySQL is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: MySQL is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to an error in 'Gis_line_string::init_from_wkb()' function in 'sql/spatial.cc', allows remote authenticated users to cause a denial of service by calling the PolyFromWKB function with WKB data containing a crafted number of line strings or line points. Vulnerability Impact: Successful exploitation could allow users to cause a denial of service and to execute arbitrary code. Affected Software/OS: MySQL version 5.1 before 5.1.51. Solution: Upgrade to MySQL version 5.1.51. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3840 BugTraq ID: 43676 http://www.securityfocus.com/bid/43676 Debian Security Information: DSA-2143 (Google Search) http://www.debian.org/security/2011/dsa-2143 http://www.mandriva.com/security/advisories?name=MDVSA-2010:222 http://www.mandriva.com/security/advisories?name=MDVSA-2010:223 http://lists.mysql.com/commits/117094 http://www.redhat.com/support/errata/RHSA-2010-0824.html http://www.redhat.com/support/errata/RHSA-2010-0825.html http://www.redhat.com/support/errata/RHSA-2011-0164.html http://secunia.com/advisories/42875 http://secunia.com/advisories/42936 TurboLinux Advisory: TLSA-2011-3 http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt http://www.ubuntu.com/usn/USN-1017-1 http://www.ubuntu.com/usn/USN-1397-1 http://www.vupen.com/english/advisories/2011/0105 http://www.vupen.com/english/advisories/2011/0170 http://www.vupen.com/english/advisories/2011/0345 XForce ISS Database: mysql-gislinestringinitfromwkb-dos(64838) https://exchange.xforce.ibmcloud.com/vulnerabilities/64838
Copyright	Copyright (C) 2011 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.