CVE-2007-1420: MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using O...

Description

MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.

Metrics

EPSS Probability

0.98%

57.9th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Mysql	Mysql	<= 5.0.33
Mysql	Mysql	5.0.0
Mysql	Mysql	5.0.1
Mysql	Mysql	5.0.2
Mysql	Mysql	5.0.3
Mysql	Mysql	5.0.4
Mysql	Mysql	5.0.5
Mysql	Mysql	5.0.10
Mysql	Mysql	5.0.15
Mysql	Mysql	5.0.16
Mysql	Mysql	5.0.17
Mysql	Mysql	5.0.20
Mysql	Mysql	5.0.24
Mysql	Mysql	5.0.30
Oracle	Mysql	5.0.6
Oracle	Mysql	5.0.7
Oracle	Mysql	5.0.32
Oracle	Mysql	5.0.41

References

http://bugs.mysql.com/bug.php?id=24630
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-36.htmlVendor Advisory
http://secunia.com/advisories/24483Vendor Advisory
http://secunia.com/advisories/24609Vendor Advisory
http://secunia.com/advisories/25196Vendor Advisory
http://secunia.com/advisories/25389Vendor Advisory
http://secunia.com/advisories/25946Vendor Advisory
http://secunia.com/advisories/30351Vendor Advisory
http://security.gentoo.org/glsa/glsa-200705-11.xml
http://securityreason.com/securityalert/2413
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
http://www.redhat.com/support/errata/RHSA-2008-0364.htmlVendor Advisory
http://www.sec-consult.com/284.htmlExploit
http://www.securityfocus.com/archive/1/462339/100/0/threaded
http://www.securityfocus.com/bid/22900Exploit, Patch
http://www.securitytracker.com/id?1017746
http://www.ubuntu.com/usn/usn-440-1
http://www.vupen.com/english/advisories/2007/0908Vendor Advisory
https://issues.rpath.com/browse/RPL-1127
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530
http://bugs.mysql.com/bug.php?id=24630
http://dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-36.htmlVendor Advisory
http://secunia.com/advisories/24483Vendor Advisory
http://secunia.com/advisories/24609Vendor Advisory
http://secunia.com/advisories/25196Vendor Advisory
http://secunia.com/advisories/25389Vendor Advisory
http://secunia.com/advisories/25946Vendor Advisory
http://secunia.com/advisories/30351Vendor Advisory
http://security.gentoo.org/glsa/glsa-200705-11.xml
http://securityreason.com/securityalert/2413
http://www.mandriva.com/security/advisories?name=MDKSA-2007:139
http://www.redhat.com/support/errata/RHSA-2008-0364.htmlVendor Advisory
http://www.sec-consult.com/284.htmlExploit
http://www.securityfocus.com/archive/1/462339/100/0/threaded
http://www.securityfocus.com/bid/22900Exploit, Patch
http://www.securitytracker.com/id?1017746
http://www.ubuntu.com/usn/usn-440-1
http://www.vupen.com/english/advisories/2007/0908Vendor Advisory
https://issues.rpath.com/browse/RPL-1127
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9530

Timeline

Published: Mar 12, 2007
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2007-1420?

MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.

How severe is CVE-2007-1420?

Severity scoring for CVE-2007-1420 is pending analysis. The EPSS model estimates a 0.98% probability of exploitation in the next 30 days.

How do I fix CVE-2007-1420?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2007

View all 2007CVEs →