CVE-2006-7232
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated...
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
Exploit likelihood
What each source reports
NVD Score used
3.5
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
- Record
CVE-2006-7232- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-89
- Updated
- 2026-11-02
CVE List No score
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
- Record
CVE-2006-7232- Updated
- 2026-11-02
EUVDEUVD-2006-7209 No score
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
- Record
EUVD-2006-7209- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r8rq-fj6m-6p56 No score
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated...
sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.
- Record
GHSA-r8rq-fj6m-6p56- Weakness
- CWE-89
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs |
before 0:5.0.45-7.el5 | 0:5.0.45-7.el5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-7232 is a low vulnerability (CVSS 3.5) in Mysql, published December 31, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. No source names a fixed version.
References
lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
dev.mysql.com/doc/refman/5.1/en/news-5-1-14.html
secunia.com/advisories/29443
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11720
secunia.com/advisories/31687
bugs.mysql.com/bug.php?id=22413
Show 52 moreShow less
securityfocus.com/bid/28351
secunia.com/advisories/30351
dev.mysql.com/doc/refman/5.0/en/releasenotes-es-5-0-32.html
ubuntu.com/usn/usn-588-1
redhat.com/support/errata/RHSA-2008-0364.html
nvd.nist.gov/vuln/detail/CVE-2006-7232
github.com/advisories/GHSA-r8rq-fj6m-6p56
access.redhat.com/errata/RHSA-2008:0364
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=194613
bugzilla.redhat.com/show_bug.cgi?id=202246
bugzilla.redhat.com/show_bug.cgi?id=216427
bugzilla.redhat.com/show_bug.cgi?id=232603
bugzilla.redhat.com/show_bug.cgi?id=240813
bugzilla.redhat.com/show_bug.cgi?id=241688
bugzilla.redhat.com/show_bug.cgi?id=241689
bugzilla.redhat.com/show_bug.cgi?id=248553
bugzilla.redhat.com/show_bug.cgi?id=254012
bugzilla.redhat.com/show_bug.cgi?id=256501
bugzilla.redhat.com/show_bug.cgi?id=349121
bugzilla.redhat.com/show_bug.cgi?id=434264
bugzilla.redhat.com/show_bug.cgi?id=435391
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0364.json
access.redhat.com/security/cve/CVE-2006-0903
cve.org/CVERecord?id=CVE-2006-0903
nvd.nist.gov/vuln/detail/CVE-2006-0903
access.redhat.com/security/cve/CVE-2006-4031
cve.org/CVERecord?id=CVE-2006-4031
nvd.nist.gov/vuln/detail/CVE-2006-4031
access.redhat.com/security/cve/CVE-2006-4227
cve.org/CVERecord?id=CVE-2006-4227
nvd.nist.gov/vuln/detail/CVE-2006-4227
access.redhat.com/security/cve/CVE-2006-7232
cve.org/CVERecord?id=CVE-2006-7232
access.redhat.com/security/cve/CVE-2007-1420
cve.org/CVERecord?id=CVE-2007-1420
nvd.nist.gov/vuln/detail/CVE-2007-1420
access.redhat.com/security/cve/CVE-2007-2583
cve.org/CVERecord?id=CVE-2007-2583
nvd.nist.gov/vuln/detail/CVE-2007-2583
access.redhat.com/security/cve/CVE-2007-2691
cve.org/CVERecord?id=CVE-2007-2691
nvd.nist.gov/vuln/detail/CVE-2007-2691
access.redhat.com/security/cve/CVE-2007-2692
cve.org/CVERecord?id=CVE-2007-2692
nvd.nist.gov/vuln/detail/CVE-2007-2692
access.redhat.com/security/cve/CVE-2007-3781
cve.org/CVERecord?id=CVE-2007-3781
nvd.nist.gov/vuln/detail/CVE-2007-3781
access.redhat.com/security/cve/CVE-2007-3782
cve.org/CVERecord?id=CVE-2007-3782
nvd.nist.gov/vuln/detail/CVE-2007-3782