| Package | Affected versions | Patched versions |
|---|---|---|
| mariadb | ≥ 10.0.0, < 10.0.2≥ 5.5.0, < 5.5.30 | 10.0.25.5.30 |
| mysql | ≥ 5.1.0, ≤ 5.1.67≥ 5.5.0, ≤ 5.5.29 |
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free