CVE-2010-3840
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows...
4.0 Medium
CVE-2010-3840 is a medium vulnerability (CVSS 4.0) in Mysql, published January 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. No source names a fixed version.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 3.39%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
Exploit likelihood
3.39%Up 0.9 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 From an advisory covering 11 CVEs | before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 | 5.0.51a-24+lenny5 |
mysqlRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
Show 61 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-benchRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 0:4.1.22-2.el4_8.4 | 0:4.1.22-2.el4_8.4 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 11 CVEs | before 0:5.0.77-4.el5_5.4 | 0:5.0.77-4.el5_5.4 |
mysqlRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::client From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::computenode From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::server From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysqlRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embeddedRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-embedded-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-benchRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-develRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-libsRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-serverRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
mysql-testRed Hat:enterprise_linux:6::workstation From an advisory covering 14 CVEs | before 0:5.1.52-1.el6_0.1 | 0:5.1.52-1.el6_0.1 |
What each source reports
NVD Score used
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
- Record
CVE-2010-3840- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
- Record
CVE-2010-3840- Updated
- 2026-11-02
EUVDEUVD-2010-3819No score
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
- Record
EUVD-2010-3819- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xj4-76jr-46qhNo score
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows...
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
- Record
GHSA-5xj4-76jr-46qh- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
ubuntu.com/usn/USN-1397-1
secunia.com/advisories/42875
redhat.com/support/errata/RHSA-2010-0824.html
bugs.mysql.com/bug.php?id=51875
Show 82 moreShow less
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
vupen.com/english/advisories/2011/0105
mandriva.com/security/advisories?name=MDVSA-2010:222
debian.org/security/2011/dsa-2143
securityfocus.com/bid/43676
bugzilla.redhat.com/show_bug.cgi?id=640865
lists.mysql.com/commits/117094
exchange.xforce.ibmcloud.com/vulnerabilities/64838
nvd.nist.gov/vuln/detail/CVE-2010-3840
github.com/advisories/GHSA-5xj4-76jr-46qh
access.redhat.com/errata/RHSA-2010:0824
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0824.json
cve.org/CVERecord?id=CVE-2010-1848