Description
Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | mysql | 3.23.49-8.2 | DSA-212 |
Advisories 1
- DSA-212 mysql - multiple problems Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20021212 Advisory 04/2002: Multiple MySQL vulnerabilities mailing-list
- CLSA-2002:555 vendor-advisory
- http://security.e-matters.de/advisories/042002.html
- DSA-212 vendor-advisory
- RHSA-2002:288 vendor-advisory
- MDKSA-2002:087 vendor-advisory
- RHSA-2003:166 vendor-advisory
- 6368 vdb-entry
- 200212-2 vendor-advisory
- mysql-comtabledump-dos(10846) vdb-entry
- SUSE-SA:2003:003 vendor-advisory
- RHSA-2002:289 vendor-advisory
- 2002-0086 vendor-advisory
- IMNX-2003-7+-008-01 vendor-advisory