CVE-2013-1861

Description

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

References

http://www.osvdb.org/91415

https://bugzilla.redhat.com/show_bug.cgi?id=919247

http://secunia.com/advisories/52639

http://seclists.org/oss-sec/2013/q1/671

http://www.securityfocus.com/bid/58511

https://mariadb.atlassian.net/browse/MDEV-4252

http://lists.askmonty.org/pipermail/commits/2013-March/004371.html

http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

http://www.ubuntu.com/usn/USN-1909-1

http://secunia.com/advisories/54300

http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html

http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html

http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html

http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html

http://www.debian.org/security/2013/dsa-2818

http://security.gentoo.org/glsa/glsa-201409-04.xml

https://exchange.xforce.ibmcloud.com/vulnerabilities/82895

Details

Risk Information

CVSS v2