ByteOS Network

NVD Vulnerability Details :

CVE-2013-1861

Deferred

Source-secalert@redhat.com

Published At-28 Mar, 2013 | 23:55

Updated At-11 Apr, 2025 | 00:51

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:N/A:P

CPE Matches

MariaDB Foundation

>>mariadb>>Versions from 5.5.0(inclusive) to 5.5.32(exclusive)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

MariaDB Foundation

>>mariadb>>Versions from 10.0.0(inclusive) to 10.0.4(exclusive)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.1.0(inclusive) to 5.1.69(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.5.0(inclusive) to 5.5.31(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Oracle Corporation

>>mysql>>Versions from 5.6.0(inclusive) to 5.6.11(inclusive)

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>5

cpe:2.3:o:redhat:enterprise_linux:5:*:*:*:*:*:*:*

Red Hat, Inc.

>>enterprise_linux>>6.0

cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*

MariaDB Foundation

>>mariadb>>Versions from 5.5.0(inclusive) to 5.5.32(exclusive)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

MariaDB Foundation

>>mariadb>>Versions from 10.0.0(inclusive) to 10.0.4(exclusive)

cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*

Debian GNU/Linux

>>debian_linux>>7.0

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.04

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

Canonical Ltd.

>>ubuntu_linux>>12.10

cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:*

Canonical Ltd.

>>ubuntu_linux>>13.04

cpe:2.3:o:canonical:ubuntu_linux:13.04:*:*:*:*:*:*:*

openSUSE

>>opensuse>>11.4

cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*

openSUSE

>>opensuse>>12.2

cpe:2.3:o:opensuse:opensuse:12.2:*:*:*:*:*:*:*

openSUSE

>>opensuse>>12.3

cpe:2.3:o:opensuse:opensuse:12.3:*:*:*:*:*:*:*

SUSE

>>linux_enterprise_desktop>>11

cpe:2.3:o:suse:linux_enterprise_desktop:11:sp3:*:*:*:*:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:-:*:*

SUSE

>>linux_enterprise_server>>11

cpe:2.3:o:suse:linux_enterprise_server:11:sp3:*:*:*:vmware:*:*

SUSE

>>linux_enterprise_software_development_kit>>11

cpe:2.3:o:suse:linux_enterprise_software_development_kit:11:sp3:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.askmonty.org/pipermail/commits/2013-March/004371.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html	secalert@redhat.com	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html	secalert@redhat.com	Mailing List Third Party Advisory
http://seclists.org/oss-sec/2013/q1/671	secalert@redhat.com	Mailing List Third Party Advisory
http://secunia.com/advisories/52639	secalert@redhat.com	Not Applicable
http://secunia.com/advisories/54300	secalert@redhat.com	Not Applicable
http://security.gentoo.org/glsa/glsa-201409-04.xml	secalert@redhat.com	Third Party Advisory
http://www.debian.org/security/2013/dsa-2818	secalert@redhat.com	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html	secalert@redhat.com	Third Party Advisory
http://www.osvdb.org/91415	secalert@redhat.com	Broken Link
http://www.securityfocus.com/bid/58511	secalert@redhat.com	Exploit Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1909-1	secalert@redhat.com	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=919247	secalert@redhat.com	Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82895	secalert@redhat.com	Third Party Advisory VDB Entry
https://mariadb.atlassian.net/browse/MDEV-4252	secalert@redhat.com	Broken Link
http://lists.askmonty.org/pipermail/commits/2013-March/004371.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://seclists.org/oss-sec/2013/q1/671	af854a3a-2127-422b-91ae-364da2661108	Mailing List Third Party Advisory
http://secunia.com/advisories/52639	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://secunia.com/advisories/54300	af854a3a-2127-422b-91ae-364da2661108	Not Applicable
http://security.gentoo.org/glsa/glsa-201409-04.xml	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.debian.org/security/2013/dsa-2818	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
http://www.osvdb.org/91415	af854a3a-2127-422b-91ae-364da2661108	Broken Link
http://www.securityfocus.com/bid/58511	af854a3a-2127-422b-91ae-364da2661108	Exploit Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1909-1	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=919247	af854a3a-2127-422b-91ae-364da2661108	Issue Tracking Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/82895	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory VDB Entry
https://mariadb.atlassian.net/browse/MDEV-4252	af854a3a-2127-422b-91ae-364da2661108	Broken Link

Hyperlink: http://lists.askmonty.org/pipermail/commits/2013-March/004371.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://seclists.org/oss-sec/2013/q1/671

Source: secalert@redhat.com

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://secunia.com/advisories/52639

Source: secalert@redhat.com

Resource:

Not Applicable

Hyperlink: http://secunia.com/advisories/54300

Source: secalert@redhat.com

Resource:

Not Applicable

Hyperlink: http://security.gentoo.org/glsa/glsa-201409-04.xml

Source: secalert@redhat.com

Resource:

Third Party Advisory

Hyperlink: http://www.debian.org/security/2013/dsa-2818

Source: secalert@redhat.com

Resource:

Third Party Advisory

Hyperlink: http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Source: secalert@redhat.com

Resource:

Third Party Advisory

Hyperlink: http://www.osvdb.org/91415

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://www.securityfocus.com/bid/58511

Source: secalert@redhat.com

Resource:

Exploit

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/USN-1909-1

Source: secalert@redhat.com

Resource:

Third Party Advisory

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=919247

Source: secalert@redhat.com

Resource:

Issue Tracking

Third Party Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/82895

Source: secalert@redhat.com

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://mariadb.atlassian.net/browse/MDEV-4252

Source: secalert@redhat.com

Resource:

Broken Link

Hyperlink: http://lists.askmonty.org/pipermail/commits/2013-March/004371.html