CVE-2004-0837

MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.

• http://bugs.mysql.com/2408Exploit, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892Broken Link
• http://lists.mysql.com/internals/16168Vendor Advisory
• http://lists.mysql.com/internals/16173Vendor Advisory
• http://lists.mysql.com/internals/16174Vendor Advisory
• http://marc.info/?l=bugtraq&m=110140517515735&w=2Mailing List, Third Party Advisory
• http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15
• http://secunia.com/advisories/12783/Third Party Advisory
• http://securitytracker.com/id?1011606Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1Broken Link
• http://www.ciac.org/ciac/bulletins/p-018.shtmlBroken Link
• http://www.debian.org/security/2004/dsa-562Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-22.xmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2004-597.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-611.htmlThird Party Advisory
• http://www.securityfocus.com/bid/11357Third Party Advisory, VDB Entry
• http://www.trustix.org/errata/2004/0054/Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17667Third Party Advisory, VDB Entry
• http://bugs.mysql.com/2408Exploit, Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892Broken Link
• http://lists.mysql.com/internals/16168Vendor Advisory
• http://lists.mysql.com/internals/16173Vendor Advisory
• http://lists.mysql.com/internals/16174Vendor Advisory
• http://marc.info/?l=bugtraq&m=110140517515735&w=2Mailing List, Third Party Advisory
• http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15
• http://secunia.com/advisories/12783/Third Party Advisory
• http://securitytracker.com/id?1011606Third Party Advisory, VDB Entry
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1Broken Link
• http://www.ciac.org/ciac/bulletins/p-018.shtmlBroken Link
• http://www.debian.org/security/2004/dsa-562Third Party Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200410-22.xmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2004-597.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2004-611.htmlThird Party Advisory
• http://www.securityfocus.com/bid/11357Third Party Advisory, VDB Entry
• http://www.trustix.org/errata/2004/0054/Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17667Third Party Advisory, VDB Entry

Published

Nov 3, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-0831McAfee VirusScan 4.5.1 does not drop SYSTEM privileges befor…
• CVE-2004-0832The (1) ntlm_fetch_string and (2) ntlm_get_string functions …
• CVE-2004-0833Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl …
• CVE-2004-0834Format string vulnerability in Speedtouch USB driver before …
• CVE-2004-0835MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.…
• CVE-2004-0836Buffer overflow in the mysql_real_connect function in MySQL …
• CVE-2004-0838Lexar Safe Guard for JumpDrive Secure 1.0 stores the passwor…
• CVE-2004-0839Internet Explorer in Windows XP SP2, and other versions incl…
• CVE-2004-0840The SMTP (Simple Mail Transfer Protocol) component of Micros…
• CVE-2004-0841Internet Explorer 6.x allows remote attackers to install arb…
• CVE-2004-0842Internet Explorer 6.0 SP1 and earlier, and possibly other ve…
• CVE-2004-0843Internet Explorer 5.5 and 6 does not properly handle plug-in…