CVE-2010-3834
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6...
CVE-2010-3834 is a medium vulnerability (CVSS 4.0) in Mysql, published January 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.21%, the 82nd percentile. No source names a fixed version.
- Severity
- 4.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.21%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:5.0 From an advisory covering 11 CVEs | before 5.0.51a-24+lenny5, plus listed versions 5.0.51a-235.0.51a-245.0.51a-24+lenny15.0.51a-24+lenny1~bpo40+15.0.51a-24+lenny2 Show 5 moreShow less5.0.51a-24+lenny2+spu15.0.51a-24+lenny2~bpo40+15.0.51a-24+lenny35.0.51a-24+lenny45.0.51a-24~bpo40+1 | 5.0.51a-24+lenny5 |
What each source reports
NVD Score used
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
CVE-2010-3834- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
CVE-2010-3834- Updated
- 2026-11-02
EUVDEUVD-2010-3813No score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
EUVD-2010-3813- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m2w3-ww5p-6g7fNo score
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6...
Unspecified vulnerability in MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via vectors related to "materializing a derived table that required a temporary table for grouping" and "user variable assignments."
- Record
GHSA-m2w3-ww5p-6g7f- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
exchange.xforce.ibmcloud.com/vulnerabilities/64844
ubuntu.com/usn/USN-1397-1
support.apple.com/kb/HT4723
secunia.com/advisories/42875
Show 14 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=640808
lists.apple.com/archives/security-announce/2011//Jun/msg00000.html
turbolinux.co.jp/security/2011/TLSA-2011-3j.txt
vupen.com/english/advisories/2011/0105
mandriva.com/security/advisories?name=MDVSA-2010:222
debian.org/security/2011/dsa-2143
securityfocus.com/bid/43676
bugs.mysql.com/bug.php?id=55568
nvd.nist.gov/vuln/detail/CVE-2010-3834
github.com/advisories/GHSA-m2w3-ww5p-6g7f