CVE-2006-1518

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow...

6.5 MediumPublic exploit

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow remote attackers to execute arbitrary code via crafted COM_TABLE_DUMP packets with invalid length values.

Exploit likelihood

38.4%Down 0.6 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2006-1518
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-1518
Updated: 2026-11-02

EUVDEUVD-2006-1522 No score

Record: EUVD-2006-1522
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h32j-3wm9-j393 No score

Buffer overflow in the open_table function in sql_base.cc in MySQL 5.0.x up to 5.0.20 might allow...

Record: GHSA-h32j-3wm9-j393
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`mysql` Debian:3.0 From an advisory covering 4 CVEs	before 3.23.49-8.15, plus listed versions 3.23.49-8.103.23.49-8.113.23.49-8.133.23.49-8.143.23.49-8.83.23.49-8.9	3.23.49-8.15
`mysql-dfsg-4.1` Debian:3.1 From an advisory covering 4 CVEs	before 4.1.11a-4sarge3, plus listed versions 4.1.11a-44.1.11a-4sarge14.1.11a-4sarge2	4.1.11a-4sarge3
`mysql-dfsg` Debian:3.1 From an advisory covering 4 CVEs	before 4.0.24-10sarge2, plus listed versions 4.0.24-104.0.24-10sarge1	4.0.24-10sarge2

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	MySQL 5.0.20 - COM_TABLE_DUMP Memory Leak/Remote Buffer Overflow	2006-05-02

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-1518 is a medium vulnerability (CVSS 6.5) in Mysql, published May 5, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 38.4%, the 98th percentile. No source names a fixed version.

References

Show 17 moreShow less