CVE-2010-3679
UnknownEPSS 12.23%
Last modified
CVE-2010-3679 is a vulnerability of currently unknown severity. Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.. EPSS estimates a 12.23% chance of exploitation in the next 30 days.
Description
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Mysql | Mysql | 5.1.5 | — |
| Mysql | Mysql | 5.1.23 | — |
| Mysql | Mysql | 5.1.31 | — |
| Mysql | Mysql | 5.1.32 | — |
| Mysql | Mysql | 5.1.34 | — |
| Mysql | Mysql | 5.1.37 | — |
| Oracle | Mysql | 5.1 | — |
| Oracle | Mysql | 5.1.1 | — |
| Oracle | Mysql | 5.1.2 | — |
| Oracle | Mysql | 5.1.3 | — |
| Oracle | Mysql | 5.1.4 | — |
| Oracle | Mysql | 5.1.6 | — |
| Oracle | Mysql | 5.1.7 | — |
| Oracle | Mysql | 5.1.8 | — |
| Oracle | Mysql | 5.1.9 | — |
| Oracle | Mysql | 5.1.10 | — |
| Oracle | Mysql | 5.1.11 | — |
| Oracle | Mysql | 5.1.12 | — |
| Oracle | Mysql | 5.1.13 | — |
| Oracle | Mysql | 5.1.14 | — |
| Oracle | Mysql | 5.1.15 | — |
| Oracle | Mysql | 5.1.16 | — |
| Oracle | Mysql | 5.1.17 | — |
| Oracle | Mysql | 5.1.18 | — |
| Oracle | Mysql | 5.1.19 | — |
| Oracle | Mysql | 5.1.20 | — |
| Oracle | Mysql | 5.1.21 | — |
| Oracle | Mysql | 5.1.22 | — |
| Oracle | Mysql | 5.1.23 | A |
| Oracle | Mysql | 5.1.24 | — |
| Oracle | Mysql | 5.1.25 | — |
| Oracle | Mysql | 5.1.26 | — |
| Oracle | Mysql | 5.1.27 | — |
| Oracle | Mysql | 5.1.28 | — |
| Oracle | Mysql | 5.1.29 | — |
| Oracle | Mysql | 5.1.30 | — |
| Oracle | Mysql | 5.1.31 | Sp1 |
| Oracle | Mysql | 5.1.33 | — |
| Oracle | Mysql | 5.1.34 | Sp1 |
| Oracle | Mysql | 5.1.35 | — |
| Oracle | Mysql | 5.1.36 | — |
| Oracle | Mysql | 5.1.37 | Sp1 |
| Oracle | Mysql | 5.1.38 | — |
| Oracle | Mysql | 5.1.39 | — |
| Oracle | Mysql | 5.1.40 | — |
| Oracle | Mysql | 5.1.41 | — |
| Oracle | Mysql | 5.1.42 | — |
| Oracle | Mysql | 5.1.43 | — |
| Oracle | Mysql | 5.1.44 | — |
| Oracle | Mysql | 5.1.45 | — |
Showing 50 of 53 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/42936Vendor Advisory
- http://www.openwall.com/lists/oss-security/2010/09/28/10Exploit, Patch
- http://www.vupen.com/english/advisories/2011/0133Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0170Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=628062Exploit, Patch
- http://secunia.com/advisories/42936Vendor Advisory
- http://www.openwall.com/lists/oss-security/2010/09/28/10Exploit, Patch
- http://www.vupen.com/english/advisories/2011/0133Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0170Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=628062Exploit, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3679?
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
How severe is CVE-2010-3679?
Severity scoring for CVE-2010-3679 is pending analysis. The EPSS model estimates a 12.23% probability of exploitation in the next 30 days.
How do I fix CVE-2010-3679?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3672TYPO3 before 4.3.4 and 4.4.x before 4.4.1 allows XSS in the …6.1
- CVE-2010-3673TYPO3 before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4…5.3
- CVE-2010-3674TYPO3 before 4.4.1 allows XSS in the frontend search box.6.1
- CVE-2010-3676storage/innobase/dict/dict0crea.c in mysqld in Oracle MySQL …
- CVE-2010-3677Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows …
- CVE-2010-3678Oracle MySQL 5.1 before 5.1.49 allows remote authenticated u…
- CVE-2010-3680Oracle MySQL 5.1 before 5.1.49 allows remote authenticated u…
- CVE-2010-3681Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows r…
- CVE-2010-3682Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows …
- CVE-2010-3683Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an…
- CVE-2010-3684The FTP authentication module in Synology Disk Station 2.x l…
- CVE-2010-3685The OpenID module in Drupal 6.x before 6.18, and the OpenID …
Are you affected by CVE-2010-3679?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST