CVE-2010-3682
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a...
4.0 MediumPublic exploit
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
Exploit likelihood
11.4%Up 0.6 points since Feb 4, 2022
What each source reports
NVD Score used
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
- Record
CVE-2010-3682- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
- Record
CVE-2010-3682- Updated
- 2026-11-02
EUVDEUVD-2010-3666 No score
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
- Record
EUVD-2010-3666- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5vcg-4cg3-gq34 No score
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a...
Oracle MySQL 5.1 before 5.1.49 and 5.0 before 5.0.92 allows remote authenticated users to cause a denial of service (mysqld daemon crash) by using EXPLAIN with crafted "SELECT ... UNION ... ORDER BY (SELECT ... WHERE ...)" statements, which triggers a NULL pointer dereference in the Item_singlerow_subselect::store function.
- Record
GHSA-5vcg-4cg3-gq34- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 From an advisory covering 11 CVEs |
before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 |
5.0.51a-24+lenny5 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
Show 41 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 5.1.48 - 'EXPLAIN' Denial of Service | 2010-08-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3682 is a medium vulnerability (CVSS 4.0) in Mysql, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. No source names a fixed version.
References
ubuntu.com/usn/USN-1397-1
support.apple.com/kb/HT4723
secunia.com/advisories/42875
lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
Show 81 moreShow less
mandriva.com/security/advisories?name=MDVSA-2011:012
vupen.com/english/advisories/2011/0105
redhat.com/support/errata/RHSA-2011-0164.html
dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html
debian.org/security/2011/dsa-2143
exchange.xforce.ibmcloud.com/vulnerabilities/64684
securityfocus.com/bid/42599
bugs.mysql.com/bug.php?id=52711
bugzilla.redhat.com/show_bug.cgi?id=628328
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
openwall.com/lists/oss-security/2010/09/28/10
nvd.nist.gov/vuln/detail/CVE-2010-3682
github.com/advisories/GHSA-5vcg-4cg3-gq34
access.redhat.com/errata/RHSA-2010:0825
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0825.json
cve.org/CVERecord?id=CVE-2010-3677