Vulnerability in Oracle MySQL

CVE-2002-1373

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.

EPSS: 0.036 (88.4th percentile) — read the EPSS interpretation.

Affected products

  • Oracle Mysql — versions 3.22.26, 3.22.27, 3.22.28
  • N/a — versions n/a

References