Vulnerability Details : CVE-2010-3682
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
Vulnerability category: Memory CorruptionDenial of service
Threat overview for CVE-2010-3682
Top countries where our scanners detected CVE-2010-3682
Top open port discovered on systems with this issue
3306
IPs affected by CVE-2010-3682 26,076
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2010-3682!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2010-3682
Probability of exploitation activity in the next 30 days: 2.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 88 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-3682
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
References for CVE-2010-3682
-
https://bugzilla.redhat.com/show_bug.cgi?id=628328
628328 – (CVE-2010-3682) CVE-2010-3682 MySQL: mysqld DoS (crash) by processing EXPLAIN statements for complex SQL queries (MySQL bug #52711)Exploit;Patch
-
http://www.vupen.com/english/advisories/2011/0133
Webmail | OVH- OVHVendor Advisory
-
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html
MySQL :: Page Not Found
-
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
MySQL :: Page Not Found
-
http://www.vupen.com/english/advisories/2011/0170
Webmail | OVH- OVHVendor Advisory
-
http://www.vupen.com/english/advisories/2011/0345
Webmail | OVH- OVHVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/64684
MySQL Item_singlerow_subselect::store denial of service CVE-2010-3682 Vulnerability Report
-
http://www.redhat.com/support/errata/RHSA-2011-0164.html
Support
-
http://www.mandriva.com/security/advisories?name=MDVSA-2011:012
mandriva.com
-
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
[security-announce] SUSE Security Summary Report: SUSE-SR:2010:019
-
http://www.ubuntu.com/usn/USN-1017-1
USN-1017-1: MySQL vulnerabilities | Ubuntu security notices
-
http://www.redhat.com/support/errata/RHSA-2010-0825.html
SupportVendor Advisory
-
http://support.apple.com/kb/HT4723
About the security content of Mac OS X v10.6.8 and Security Update 2011-004 - Apple Support
-
http://bugs.mysql.com/bug.php?id=52711
MySQL Bugs: #52711: Segfault when doing EXPLAIN SELECT with union...order by (select... where...)Exploit;Patch
-
http://www.mandriva.com/security/advisories?name=MDVSA-2010:222
mandriva.com
- http://www.turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
-
http://www.ubuntu.com/usn/USN-1397-1
USN-1397-1: MySQL vulnerabilities | Ubuntu security notices
-
http://www.mandriva.com/security/advisories?name=MDVSA-2010:155
mandriva.com
-
http://www.debian.org/security/2011/dsa-2143
Debian -- Security Information -- DSA-2143-1 mysql-dfsg-5.0
-
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
Apple - Lists.apple.com
-
http://www.vupen.com/english/advisories/2011/0105
Webmail | OVH- OVHVendor Advisory
-
http://www.openwall.com/lists/oss-security/2010/09/28/10
oss-security - Re: CVE Request -- MySQL v5.1.49 -- multiple DoS flawsExploit;Patch
-
http://www.securityfocus.com/bid/42599
Oracle MySQL 'EXPLAIN' Denial Of Service Vulnerability
Products affected by CVE-2010-3682
- cpe:2.3:a:oracle:mysql:5.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.10:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.11:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.41:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.32:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.15:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.16:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.12:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.17:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.13:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.14:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.34:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.52:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.18:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.19:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.20:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.42:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.44:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.45:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.58:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.62:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.40:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.48:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.22:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.30:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.36:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.38:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.46:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.50:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.56:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.64:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.66:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.21:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.67:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.75:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.77:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.81:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.83:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.30:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.23:a:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.29:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.26:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.24:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.25:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.27:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.31:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.28:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.33:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.38:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.39:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.34:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.40:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.40:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.85:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.37:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.86:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.35:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.36:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.88:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.89:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.90:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.43:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.46:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.41:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.47:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.45:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.42:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.43:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.46:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.1.44:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.82:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.74:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.84:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.76:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.68:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.87:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.66:a:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.51:b:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.51:a:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.80:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.79:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.78:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.72:sp1:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:5.0.70:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.15:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.16:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.17:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.20:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.24:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.30:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.36:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.44:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.60:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.54:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.56:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.66:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.1.23:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.1.32:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.82:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.1.31:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.1.34:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.84:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.1.37:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.87:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.74:*:*:*:*:*:*:*
- cpe:2.3:a:mysql:mysql:5.0.72:*:*:*:*:*:*:*