| Package | Affected versions | Patched versions |
|---|---|---|
| mysql | = 5.1.23= 5.1.31= 5.1.32= 5.1.34= 5.1.37= 5.1.5 | |
| mysql | = 5.1= 5.1.1= 5.1.10= 5.1.11= 5.1.12= 5.1.13= 5.1.14= 5.1.15= 5.1.16= 5.1.17= 5.1.18= 5.1.19= 5.1.2= 5.1.20= 5.1.21= 5.1.22= 5.1.23= 5.1.24= 5.1.25= 5.1.26= 5.1.27= 5.1.28= 5.1.29= 5.1.3= 5.1.30= 5.1.31= 5.1.33= 5.1.34= 5.1.35= 5.1.36= 5.1.37= 5.1.38= 5.1.39= 5.1.4= 5.1.40= 5.1.41= 5.1.42= 5.1.43= 5.1.44= 5.1.45= 5.1.46= 5.1.47= 5.1.48= 5.1.49= 5.1.50= 5.1.6= 5.1.7= 5.1.8= 5.1.9 |
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free