CVE-2010-3834
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6...
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
CVE-2010-3834- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
CVE-2010-3834- Updated
- 2026-11-02
EUVDEUVD-2010-3813 No score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
EUVD-2010-3813- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m2w3-ww5p-6g7f No score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6...
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
GHSA-m2w3-ww5p-6g7f- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 From an advisory covering 11 CVEs |
before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 |
5.0.51a-24+lenny5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3834 is a medium vulnerability (CVSS 4.0) in Mysql, published January 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. No source names a fixed version.
References
dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
exchange.xforce.ibmcloud.com/vulnerabilities/64844
ubuntu.com/usn/USN-1397-1
support.apple.com/kb/HT4723
secunia.com/advisories/42875
Show 14 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=640808
lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
vupen.com/english/advisories/2011/0105
mandriva.com/security/advisories?name=MDVSA-2010:222
debian.org/security/2011/dsa-2143
securityfocus.com/bid/43676
bugs.mysql.com/bug.php?id=55568
nvd.nist.gov/vuln/detail/CVE-2010-3834
github.com/advisories/GHSA-m2w3-ww5p-6g7f