Description
mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.1 | mysql-dfsg-4.1 | 4.1.11a-4sarge5 | DSA-1112 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | mysql +3 | 4.1.20-1.RHEL4.1 | RHSA-2006:0544 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Rhel Application Stack 1 | mysql +4 | 5.0.30-1.el4s1.1 | RHSA-2007:0083 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- MySQL Server 4/5 - Str_To_Date Remote Denial of Service EDB-28026 · dos · Jun 14, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 3
- RHSA-2006:0544 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- DSA-1112 mysql-dfsg-4.1 - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
- RHSA-2007:0083 Red Hat Security Advisory: mysql security update Red Hat Security Advisories (RHSA) · Jan 7, 2026
References
- mysql-select-dos(27212) vdb-entry
- 19929 third-party-advisory
- TA07-072A third-party-advisory
- 20060615 MySQL DoS mailing-list
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=373913
- TA06-208A third-party-advisory
- 20832 third-party-advisory
- APPLE-SA-2007-03-13 vendor-advisory
- 20060614 MySQL DoS mailing-list
- http://docs.info.apple.com/article.html?artnum=305214
- MDKSA-2006:111 vendor-advisory
- 20060615 Re: MySQL DoS mailing-list
- DSA-1112 vendor-advisory
- 18439 vdb-entry
- ADV-2007-0930 vdb-entry
- 20871 third-party-advisory
- RHSA-2007:0083 vendor-advisory
- 20060615 Re: MySQL DoS mailing-list
- USN-306-1 vendor-advisory
- http://bugs.mysql.com/bug.php?id=15828
- 24479 third-party-advisory
- oval:org.mitre.oval:def:9516 vdb-entry signature