CVE-2010-3680
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
Exploit likelihood
What each source reports
NVD Score used
4.0
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
- Record
CVE-2010-3680- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
- Record
CVE-2010-3680- Updated
- 2026-11-02
EUVDEUVD-2010-3664 No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
- Record
EUVD-2010-3664- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vxqm-vpmr-r6q9 No score
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service ...
Oracle MySQL 5.1 before 5.1.49 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by creating temporary tables with nullable columns while using InnoDB, which triggers an assertion failure.
- Record
GHSA-vxqm-vpmr-r6q9- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 |
before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 |
5.0.51a-24+lenny5 |
mysqlRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::client_workstation |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::client |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::server |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 5.1.48 - 'Temporary InnoDB' Tables Denial of Service | 2010-08-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3680 is a medium vulnerability (CVSS 4.0) in Mysql, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.2%, the 96th percentile. Fixed in mysql-dfsg-5.0 5.0.51a-24+lenny5.
References
ubuntu.com/usn/USN-1397-1
securityfocus.com/bid/42598
exchange.xforce.ibmcloud.com/vulnerabilities/64686
secunia.com/advisories/42875
ubuntu.com/usn/USN-1017-1
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
Show 77 moreShow less
mandriva.com/security/advisories?name=MDVSA-2011:012
bugzilla.redhat.com/show_bug.cgi?id=628192
vupen.com/english/advisories/2011/0105
mandriva.com/security/advisories?name=MDVSA-2010:222
redhat.com/support/errata/RHSA-2011-0164.html
vupen.com/english/advisories/2011/0170
vupen.com/english/advisories/2011/0133
dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
debian.org/security/2011/dsa-2143
vupen.com/english/advisories/2011/0345
mandriva.com/security/advisories?name=MDVSA-2010:155
secunia.com/advisories/42936
bugs.mysql.com/bug.php?id=54044
redhat.com/support/errata/RHSA-2010-0825.html
openwall.com/lists/oss-security/2010/09/28/10
nvd.nist.gov/vuln/detail/CVE-2010-3680
github.com/advisories/GHSA-vxqm-vpmr-r6q9
access.redhat.com/errata/RHSA-2010:0825
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=628040
bugzilla.redhat.com/show_bug.cgi?id=628328
bugzilla.redhat.com/show_bug.cgi?id=628680
bugzilla.redhat.com/show_bug.cgi?id=640751
bugzilla.redhat.com/show_bug.cgi?id=640819
bugzilla.redhat.com/show_bug.cgi?id=640845
bugzilla.redhat.com/show_bug.cgi?id=640856
bugzilla.redhat.com/show_bug.cgi?id=640858
bugzilla.redhat.com/show_bug.cgi?id=640861
bugzilla.redhat.com/show_bug.cgi?id=640865
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0825.json
access.redhat.com/security/cve/CVE-2010-3677
cve.org/CVERecord?id=CVE-2010-3677
nvd.nist.gov/vuln/detail/CVE-2010-3677
access.redhat.com/security/cve/CVE-2010-3680
cve.org/CVERecord?id=CVE-2010-3680
access.redhat.com/security/cve/CVE-2010-3681
cve.org/CVERecord?id=CVE-2010-3681
nvd.nist.gov/vuln/detail/CVE-2010-3681
access.redhat.com/security/cve/CVE-2010-3682
cve.org/CVERecord?id=CVE-2010-3682
nvd.nist.gov/vuln/detail/CVE-2010-3682
access.redhat.com/security/cve/CVE-2010-3833
cve.org/CVERecord?id=CVE-2010-3833
nvd.nist.gov/vuln/detail/CVE-2010-3833
access.redhat.com/security/cve/CVE-2010-3835
cve.org/CVERecord?id=CVE-2010-3835
nvd.nist.gov/vuln/detail/CVE-2010-3835
access.redhat.com/security/cve/CVE-2010-3836
cve.org/CVERecord?id=CVE-2010-3836
nvd.nist.gov/vuln/detail/CVE-2010-3836
access.redhat.com/security/cve/CVE-2010-3837
cve.org/CVERecord?id=CVE-2010-3837
nvd.nist.gov/vuln/detail/CVE-2010-3837
access.redhat.com/security/cve/CVE-2010-3838
cve.org/CVERecord?id=CVE-2010-3838
nvd.nist.gov/vuln/detail/CVE-2010-3838
access.redhat.com/security/cve/CVE-2010-3839
cve.org/CVERecord?id=CVE-2010-3839
nvd.nist.gov/vuln/detail/CVE-2010-3839
access.redhat.com/security/cve/CVE-2010-3840
cve.org/CVERecord?id=CVE-2010-3840
nvd.nist.gov/vuln/detail/CVE-2010-3840
access.redhat.com/errata/RHSA-2011:0164
dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
bugzilla.redhat.com/show_bug.cgi?id=628062
bugzilla.redhat.com/show_bug.cgi?id=628172
bugzilla.redhat.com/show_bug.cgi?id=628698
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0164.json
access.redhat.com/security/cve/CVE-2010-3678
cve.org/CVERecord?id=CVE-2010-3678
nvd.nist.gov/vuln/detail/CVE-2010-3678
access.redhat.com/security/cve/CVE-2010-3679
cve.org/CVERecord?id=CVE-2010-3679
nvd.nist.gov/vuln/detail/CVE-2010-3679
access.redhat.com/security/cve/CVE-2010-3683
cve.org/CVERecord?id=CVE-2010-3683
nvd.nist.gov/vuln/detail/CVE-2010-3683