cve/2010/CVE-2010-3835.md
2024-06-18 02:51:15 +02:00

883 B

CVE-2010-3835

Description

MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (mysqld server crash) by performing a user-variable assignment in a logical expression that is calculated and stored in a temporary table for GROUP BY, then causing the expression value to be used after the table is created, which causes the expression to be re-evaluated instead of accessing its value from the table.

POC

Reference

Github

No PoCs found on GitHub currently.