Main
Vulnerability Database
Exploits
ID:4443 - Exploit for Input validation error in mysql - CVE-2010-3681
ID:4443 - Exploit for Input validation error in mysql - CVE-2010-3681
Published: August 11, 2020
Vulnerability identifier: #VU45467
Vulnerability risk: Low
CVE-ID: CVE-2010-3681
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
mysql
mysql
Link to public exploit:
Vulnerability description
The vulnerability allows a remote #AU# to perform service disruption.
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
Remediation
Install update from vendor's website.