CVE-2010-3683
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE...
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
Exploit likelihood
What each source reports
NVD Score used
4.0
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
- Record
CVE-2010-3683- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
- Record
CVE-2010-3683- Updated
- 2026-11-02
EUVDEUVD-2010-3667 No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
- Record
EUVD-2010-3667- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5q5q-54rm-rj75 No score
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE...
Oracle MySQL 5.1 before 5.1.49 and 5.5 before 5.5.5 sends an OK packet when a LOAD DATA INFILE request generates SQL errors, which allows remote authenticated users to cause a denial of service (mysqld daemon crash) via a crafted request.
- Record
GHSA-5q5q-54rm-rj75- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | OraclMySQL 5.1.48 - 'LOAD DATA INFILE' Denial of Service | 2010-08-20 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3683 is a medium vulnerability (CVSS 4.0) in Mysql, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.2%, the 96th percentile. No source names a fixed version.
References
ubuntu.com/usn/USN-1397-1
ubuntu.com/usn/USN-1017-1
dev.mysql.com/doc/refman/5.5/en/news-5-5-5.html
mandriva.com/security/advisories?name=MDVSA-2011:012
bugs.mysql.com/bug.php?id=52512
redhat.com/support/errata/RHSA-2011-0164.html
Show 71 moreShow less
vupen.com/english/advisories/2011/0170
vupen.com/english/advisories/2011/0133
dev.mysql.com/doc/refman/5.1/en/news-5-1-49.html
mandriva.com/security/advisories?name=MDVSA-2010:155
secunia.com/advisories/42936
lists.opensuse.org/opensuse-security-announce/2010-11/msg00005.html
bugzilla.redhat.com/show_bug.cgi?id=628698
securityfocus.com/bid/42625
lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
exchange.xforce.ibmcloud.com/vulnerabilities/64683
openwall.com/lists/oss-security/2010/09/28/10
nvd.nist.gov/vuln/detail/CVE-2010-3683
github.com/advisories/GHSA-5q5q-54rm-rj75
access.redhat.com/errata/RHSA-2011:0164
access.redhat.com/security/updates/classification
dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
bugzilla.redhat.com/show_bug.cgi?id=628040
bugzilla.redhat.com/show_bug.cgi?id=628062
bugzilla.redhat.com/show_bug.cgi?id=628172
bugzilla.redhat.com/show_bug.cgi?id=628192
bugzilla.redhat.com/show_bug.cgi?id=628328
bugzilla.redhat.com/show_bug.cgi?id=628680
bugzilla.redhat.com/show_bug.cgi?id=640751
bugzilla.redhat.com/show_bug.cgi?id=640819
bugzilla.redhat.com/show_bug.cgi?id=640845
bugzilla.redhat.com/show_bug.cgi?id=640856
bugzilla.redhat.com/show_bug.cgi?id=640858
bugzilla.redhat.com/show_bug.cgi?id=640861
bugzilla.redhat.com/show_bug.cgi?id=640865
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0164.json
access.redhat.com/security/cve/CVE-2010-3677
cve.org/CVERecord?id=CVE-2010-3677
nvd.nist.gov/vuln/detail/CVE-2010-3677
access.redhat.com/security/cve/CVE-2010-3678
cve.org/CVERecord?id=CVE-2010-3678
nvd.nist.gov/vuln/detail/CVE-2010-3678
access.redhat.com/security/cve/CVE-2010-3679
cve.org/CVERecord?id=CVE-2010-3679
nvd.nist.gov/vuln/detail/CVE-2010-3679
access.redhat.com/security/cve/CVE-2010-3680
cve.org/CVERecord?id=CVE-2010-3680
nvd.nist.gov/vuln/detail/CVE-2010-3680
access.redhat.com/security/cve/CVE-2010-3681
cve.org/CVERecord?id=CVE-2010-3681
nvd.nist.gov/vuln/detail/CVE-2010-3681
access.redhat.com/security/cve/CVE-2010-3682
cve.org/CVERecord?id=CVE-2010-3682
nvd.nist.gov/vuln/detail/CVE-2010-3682
access.redhat.com/security/cve/CVE-2010-3683
cve.org/CVERecord?id=CVE-2010-3683
access.redhat.com/security/cve/CVE-2010-3833
cve.org/CVERecord?id=CVE-2010-3833
nvd.nist.gov/vuln/detail/CVE-2010-3833
access.redhat.com/security/cve/CVE-2010-3835
cve.org/CVERecord?id=CVE-2010-3835
nvd.nist.gov/vuln/detail/CVE-2010-3835
access.redhat.com/security/cve/CVE-2010-3836
cve.org/CVERecord?id=CVE-2010-3836
nvd.nist.gov/vuln/detail/CVE-2010-3836
access.redhat.com/security/cve/CVE-2010-3837
cve.org/CVERecord?id=CVE-2010-3837
nvd.nist.gov/vuln/detail/CVE-2010-3837
access.redhat.com/security/cve/CVE-2010-3838
cve.org/CVERecord?id=CVE-2010-3838
nvd.nist.gov/vuln/detail/CVE-2010-3838
access.redhat.com/security/cve/CVE-2010-3839
cve.org/CVERecord?id=CVE-2010-3839
nvd.nist.gov/vuln/detail/CVE-2010-3839
access.redhat.com/security/cve/CVE-2010-3840
cve.org/CVERecord?id=CVE-2010-3840
nvd.nist.gov/vuln/detail/CVE-2010-3840