MariaDB Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	55460
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 07 2012 12:00AM
Updated:	Sep 07 2012 12:00AM
Credit:	jbergstroem in a bug report
Vulnerable:
Not Vulnerable:

MariaDB Multiple Denial Of Service Vulnerabilities

MariaDB is prone to multiple denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the database server, denying access to legitimate users.

MariaDB 5.5.25 is vulnerable; other versions may also be affected.

MariaDB Multiple Denial Of Service Vulnerabilities

Attackers can exploit these issues using readily available tools.

MariaDB Multiple Denial Of Service Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

MariaDB Multiple Denial Of Service Vulnerabilities

References:

• MariaDB 5.5.27 Release Notes (Monty Program Ab)
  
• MariaDB Homepage (Monty Program Ab)
  
• Server crashes in select_describe on EXPLAIN with materialization+semijoin, 2 ne (Monty Program Ab)
  
• Server crashes in test_if_skip_sort_order on EXPLAIN with GROUP BY and HAVING in (Monty Program Ab)