CVE-2010-3679
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
Exploit likelihood
What each source reports
NVD Score used
4.0
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
- Record
CVE-2010-3679- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
- Record
CVE-2010-3679- Updated
- 2026-11-02
EUVDEUVD-2010-3663 No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
- Record
EUVD-2010-3663- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p3mv-xmc9-r2fr No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) via certain arguments to the BINLOG command, which triggers an access of uninitialized memory, as demonstrated by valgrind.
- Record
GHSA-p3mv-xmc9-r2fr- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Oracle MySQL < 5.1.49 - Malformed 'BINLOG' Arguments Denial of Service | 2010-08-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3679 is a medium vulnerability (CVSS 4.0) in Mysql, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.2%, the 96th percentile. Fixed in mysql 0:5.1.52-1.el6_0.1.
References
ubuntu.com/usn/USN-1397-1
exchange.xforce.ibmcloud.com/vulnerabilities/64687
ubuntu.com/usn/USN-1017-1
mandriva.com/security/advisories?name=MDVSA-2011:012
redhat.com/support/errata/RHSA-2011-0164.html
vupen.com/english/advisories/2011/0170
Show 68 moreShow less
securityfocus.com/bid/42638
vupen.com/english/advisories/2011/0133
bugs.mysql.com/bug.php?id=54393
dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
mandriva.com/security/advisories?name=MDVSA-2010:155
bugzilla.redhat.com/show_bug.cgi?id=628062
secunia.com/advisories/42936
openwall.com/lists/oss-security/2010/09/28/10
nvd.nist.gov/vuln/detail/CVE-2010-3679
github.com/advisories/GHSA-p3mv-xmc9-r2fr
access.redhat.com/errata/RHSA-2011:0164
access.redhat.com/security/updates/classification
dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
bugzilla.redhat.com/show_bug.cgi?id=628040
bugzilla.redhat.com/show_bug.cgi?id=628172
bugzilla.redhat.com/show_bug.cgi?id=628192
bugzilla.redhat.com/show_bug.cgi?id=628328
bugzilla.redhat.com/show_bug.cgi?id=628680
bugzilla.redhat.com/show_bug.cgi?id=628698
bugzilla.redhat.com/show_bug.cgi?id=640751
bugzilla.redhat.com/show_bug.cgi?id=640819
bugzilla.redhat.com/show_bug.cgi?id=640845
bugzilla.redhat.com/show_bug.cgi?id=640856
bugzilla.redhat.com/show_bug.cgi?id=640858
bugzilla.redhat.com/show_bug.cgi?id=640861
bugzilla.redhat.com/show_bug.cgi?id=640865
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0164.json
access.redhat.com/security/cve/CVE-2010-3677
cve.org/CVERecord?id=CVE-2010-3677
nvd.nist.gov/vuln/detail/CVE-2010-3677
access.redhat.com/security/cve/CVE-2010-3678
cve.org/CVERecord?id=CVE-2010-3678
nvd.nist.gov/vuln/detail/CVE-2010-3678
access.redhat.com/security/cve/CVE-2010-3679
cve.org/CVERecord?id=CVE-2010-3679
access.redhat.com/security/cve/CVE-2010-3680
cve.org/CVERecord?id=CVE-2010-3680
nvd.nist.gov/vuln/detail/CVE-2010-3680
access.redhat.com/security/cve/CVE-2010-3681
cve.org/CVERecord?id=CVE-2010-3681
nvd.nist.gov/vuln/detail/CVE-2010-3681
access.redhat.com/security/cve/CVE-2010-3682
cve.org/CVERecord?id=CVE-2010-3682
nvd.nist.gov/vuln/detail/CVE-2010-3682
access.redhat.com/security/cve/CVE-2010-3683
cve.org/CVERecord?id=CVE-2010-3683
nvd.nist.gov/vuln/detail/CVE-2010-3683
access.redhat.com/security/cve/CVE-2010-3833
cve.org/CVERecord?id=CVE-2010-3833
nvd.nist.gov/vuln/detail/CVE-2010-3833
access.redhat.com/security/cve/CVE-2010-3835
cve.org/CVERecord?id=CVE-2010-3835
nvd.nist.gov/vuln/detail/CVE-2010-3835
access.redhat.com/security/cve/CVE-2010-3836
cve.org/CVERecord?id=CVE-2010-3836
nvd.nist.gov/vuln/detail/CVE-2010-3836
access.redhat.com/security/cve/CVE-2010-3837
cve.org/CVERecord?id=CVE-2010-3837
nvd.nist.gov/vuln/detail/CVE-2010-3837
access.redhat.com/security/cve/CVE-2010-3838
cve.org/CVERecord?id=CVE-2010-3838
nvd.nist.gov/vuln/detail/CVE-2010-3838
access.redhat.com/security/cve/CVE-2010-3839
cve.org/CVERecord?id=CVE-2010-3839
nvd.nist.gov/vuln/detail/CVE-2010-3839
access.redhat.com/security/cve/CVE-2010-3840
cve.org/CVERecord?id=CVE-2010-3840
nvd.nist.gov/vuln/detail/CVE-2010-3840