CVE-2010-3834

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-14 · updated 2026-06-16

Description

Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."

Affected products

Mysql: 5.1.5, 5.1.23, 5.1.31, 5.1.32, 5.1.34, 5.1.37 (+25)
MySQL Server: 5.1, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.6 (+93)

References

http://bugs.mysql.com/bug.php?id=55568
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
http://secunia.com/advisories/42875
http://support.apple.com/kb/HT4723
http://www.debian.org/security/2011/dsa-2143
http://www.mandriva.com/security/advisories?name=MDVSA-2010:222
http://www.mandriva.com/security/advisories?name=MDVSA-2010:223
http://www.securityfocus.com/bid/43676
http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt

Get alerted when CVE-2010-3834 or the next vulnerability affects your stack