CVE-2010-3839
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial...
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
Exploit likelihood
What each source reports
NVD Score used
4.0
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
- Record
CVE-2010-3839- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
- Record
CVE-2010-3839- Updated
- 2026-11-02
EUVDEUVD-2010-3818 No score
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
- Record
EUVD-2010-3818- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4m2w-227w-x947 No score
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial...
MySQL 5.1 before 5.1.51 and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (infinite loop) via multiple invocations of a (1) prepared statement or (2) stored procedure that creates a query with nested JOIN statements.
- Record
GHSA-4m2w-227w-x947- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs |
before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs |
before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-3839 is a medium vulnerability (CVSS 4.0) in Mysql, published January 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.37%, the 88th percentile. No source names a fixed version.
References
dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
ubuntu.com/usn/USN-1397-1
ubuntu.com/usn/USN-1017-1
mandriva.com/security/advisories?name=MDVSA-2010:222
redhat.com/support/errata/RHSA-2011-0164.html
Show 70 moreShow less
vupen.com/english/advisories/2011/0170
securityfocus.com/bid/43676
bugs.mysql.com/bug.php?id=53544
secunia.com/advisories/42936
redhat.com/support/errata/RHSA-2010-0825.html
exchange.xforce.ibmcloud.com/vulnerabilities/64839
bugzilla.redhat.com/show_bug.cgi?id=640861
mandriva.com/security/advisories?name=MDVSA-2010:223
nvd.nist.gov/vuln/detail/CVE-2010-3839
github.com/advisories/GHSA-4m2w-227w-x947
access.redhat.com/errata/RHSA-2010:0825
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=628040
bugzilla.redhat.com/show_bug.cgi?id=628192
bugzilla.redhat.com/show_bug.cgi?id=628328
bugzilla.redhat.com/show_bug.cgi?id=628680
bugzilla.redhat.com/show_bug.cgi?id=640751
bugzilla.redhat.com/show_bug.cgi?id=640819
bugzilla.redhat.com/show_bug.cgi?id=640845
bugzilla.redhat.com/show_bug.cgi?id=640856
bugzilla.redhat.com/show_bug.cgi?id=640858
bugzilla.redhat.com/show_bug.cgi?id=640865
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0825.json
access.redhat.com/security/cve/CVE-2010-3677
cve.org/CVERecord?id=CVE-2010-3677
nvd.nist.gov/vuln/detail/CVE-2010-3677
access.redhat.com/security/cve/CVE-2010-3680
cve.org/CVERecord?id=CVE-2010-3680
nvd.nist.gov/vuln/detail/CVE-2010-3680
access.redhat.com/security/cve/CVE-2010-3681
cve.org/CVERecord?id=CVE-2010-3681
nvd.nist.gov/vuln/detail/CVE-2010-3681
access.redhat.com/security/cve/CVE-2010-3682
cve.org/CVERecord?id=CVE-2010-3682
nvd.nist.gov/vuln/detail/CVE-2010-3682
access.redhat.com/security/cve/CVE-2010-3833
cve.org/CVERecord?id=CVE-2010-3833
nvd.nist.gov/vuln/detail/CVE-2010-3833
access.redhat.com/security/cve/CVE-2010-3835
cve.org/CVERecord?id=CVE-2010-3835
nvd.nist.gov/vuln/detail/CVE-2010-3835
access.redhat.com/security/cve/CVE-2010-3836
cve.org/CVERecord?id=CVE-2010-3836
nvd.nist.gov/vuln/detail/CVE-2010-3836
access.redhat.com/security/cve/CVE-2010-3837
cve.org/CVERecord?id=CVE-2010-3837
nvd.nist.gov/vuln/detail/CVE-2010-3837
access.redhat.com/security/cve/CVE-2010-3838
cve.org/CVERecord?id=CVE-2010-3838
nvd.nist.gov/vuln/detail/CVE-2010-3838
access.redhat.com/security/cve/CVE-2010-3839
cve.org/CVERecord?id=CVE-2010-3839
access.redhat.com/security/cve/CVE-2010-3840
cve.org/CVERecord?id=CVE-2010-3840
nvd.nist.gov/vuln/detail/CVE-2010-3840
access.redhat.com/errata/RHSA-2011:0164
dev.mysql.com/doc/refman/5.1/en/news-5-1-52.html
bugzilla.redhat.com/show_bug.cgi?id=628062
bugzilla.redhat.com/show_bug.cgi?id=628172
bugzilla.redhat.com/show_bug.cgi?id=628698
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0164.json
access.redhat.com/security/cve/CVE-2010-3678
cve.org/CVERecord?id=CVE-2010-3678
nvd.nist.gov/vuln/detail/CVE-2010-3678
access.redhat.com/security/cve/CVE-2010-3679
cve.org/CVERecord?id=CVE-2010-3679
nvd.nist.gov/vuln/detail/CVE-2010-3679
access.redhat.com/security/cve/CVE-2010-3683
cve.org/CVERecord?id=CVE-2010-3683
nvd.nist.gov/vuln/detail/CVE-2010-3683