CVE-2010-3681
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a...
4.0 MediumPublic exploit
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
Exploit likelihood
12.2%Up 1.4 points since Feb 4, 2022
What each source reports
NVD Score used
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
- Record
CVE-2010-3681- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
- Record
CVE-2010-3681- Updated
- 2026-11-02
EUVDEUVD-2010-3665 No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
- Record
EUVD-2010-3665- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-65wh-mvxp-pfp2 No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a...
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using the HANDLER interface and performing "alternate reads from two indexes on a table," which triggers an assertion failure.
- Record
GHSA-65wh-mvxp-pfp2- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 From an advisory covering 11 CVEs |
before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 |
5.0.51a-24+lenny5 |
mysqlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Oracle MySQL 5.1.48 - 'HANDLER' Interface Denial of Service | 2010-08-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3681 is a medium vulnerability (CVSS 4.0) in Mysql, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.2%, the 96th percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=628680
ubuntu.com/usn/USN-1397-1
secunia.com/advisories/42875
redhat.com/support/errata/RHSA-2010-0824.html
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
Show 87 moreShow less
dev.mysql.com/doc/refman/5.5/en/news-5-5-5.html
mandriva.com/security/advisories?name=MDVSA-2011:012
exchange.xforce.ibmcloud.com/vulnerabilities/64685
vupen.com/english/advisories/2011/0105
bugs.mysql.com/bug.php?id=54007
debian.org/security/2011/dsa-2143
lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
securityfocus.com/bid/42633
openwall.com/lists/oss-security/2010/09/28/10
nvd.nist.gov/vuln/detail/CVE-2010-3681
github.com/advisories/GHSA-65wh-mvxp-pfp2
access.redhat.com/errata/RHSA-2010:0824
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0824.json
cve.org/CVERecord?id=CVE-2010-1848