CVE-2009-2446
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...
8.5 HighPublic exploitFix available
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
Exploit likelihood
10.6%Down 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-2446- CVSS 2.0
- 8.5 High
AV:N/AC:M/Au:S/C:C/I:C/A:C - Weakness
- CWE-134
- Updated
- 2026-11-02
CVE List No score
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
- Record
CVE-2009-2446- Updated
- 2026-11-02
EUVDEUVD-2009-2441 No score
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2009-2441- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8wr-mc75-9wjp No score
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc...
Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.
- Record
GHSA-q8wr-mc75-9wjp- Weakness
- CWE-134
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:4.0 |
before 5.0.32-7etch11, plus listed versions 5.0.32-7etch15.0.32-7etch105.0.32-7etch35.0.32-7etch3~bpo31+15.0.32-7etch4 Show 4 moreShow less5.0.32-7etch55.0.32-7etch5~bpo31+15.0.32-7etch65.0.32-7etch8 |
5.0.32-7etch11 |
mysql-dfsg-5.0Debian:5.0 |
before 5.0.51a-24+lenny2, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2~bpo40+15.0.51a-24~bpo40+1 |
5.0.51a-24+lenny2 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
Show 79 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 4 CVEs |
before 0:5.0.77-3.el5 | 0:5.0.77-3.el5 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:2.2.13-2.el5s2 | 0:2.2.13-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:2.2.13-2.el5s2 | 1:2.2.13-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.0.84-2.el5s2 | 0:5.0.84-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:4.012-1.el5s2 | 0:4.012-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:1.609-1.el5s2 | 0:1.609-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-pearRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 1:1.8.1-2.el5s2 | 1:1.8.1-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:5.2.10-1.el5s2 | 0:5.2.10-1.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.510-1jpp.el5s2 | 0:8.2.510-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs |
before 0:8.2.14-1.el5s2 | 0:8.2.14-1.el5s2 |
mysqlRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-benchRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-serverRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-benchRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysqlRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-benchRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-serverRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-benchRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
mysql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:4.1.22-2.el4_8.3 | 0:4.1.22-2.el4_8.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 5.0.75 - 'sql_parse.cc' Multiple Format String Vulnerabilities | 2009-06-08 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2446 is a high vulnerability (CVSS 8.5) in Mysql, published July 13, 2009. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.6%, the 95th percentile. Fixed in mysql-dfsg-5.0 5.0.32-7etch11.
References
ubuntu.com/usn/USN-1397-1
archives.neohapsis.com/archives/fulldisclosure/2009-07/0058.html
securityfocus.com/archive/1/504799/100/0/threaded
secunia.com/advisories/38517
ubuntu.com/usn/usn-897-1
redhat.com/support/errata/RHSA-2009-1289.html
Show 81 moreShow less
lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
securitytracker.com/id?1022533
osvdb.org/55734
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11857
vupen.com/english/advisories/2009/1857
support.apple.com/kb/HT4077
exchange.xforce.ibmcloud.com/vulnerabilities/51614
mandriva.com/security/advisories?name=MDVSA-2009:179
nvd.nist.gov/vuln/detail/CVE-2009-2446
github.com/advisories/GHSA-q8wr-mc75-9wjp
access.redhat.com/errata/RHSA-2009:1289
bugzilla.redhat.com/show_bug.cgi?id=462534
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1289.json
cve.org/CVERecord?id=CVE-2008-2079
dev.mysql.com/doc/refman/4.1/en/symbolic-links-to-tables.html