CVE-2007-5925
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23...
4.0 MediumPublic exploitFix available
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
Exploit likelihood
11.4%Up 0.3 points since Feb 4, 2022
What each source reports
NVD Score used
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
- Record
CVE-2007-5925- CVSS 2.0
- 4.0 Medium
AV:N/AC:L/Au:S/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
- Record
CVE-2007-5925- Updated
- 2026-11-02
EUVDEUVD-2007-5895 No score
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
- Record
EUVD-2007-5895- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7qx6-9mjj-x6hf No score
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23...
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.
- Record
GHSA-7qx6-9mjj-x6hf- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql-dfsg-5.0Debian:4.0 From an advisory covering 6 CVEs |
before 5.0.32-7etch3, plus listed versions 5.0.32-7etch15.0.32-7etch3~bpo31+1 |
5.0.32-7etch3 |
mysql-dfsgDebian:3.1 From an advisory covering 6 CVEs |
before 4.0.24-10sarge3, plus listed versions 4.0.24-104.0.24-10sarge14.0.24-10sarge2 |
4.0.24-10sarge3 |
mysql-dfsg-4.1Debian:3.1 From an advisory covering 6 CVEs |
before 4.1.11a-4sarge8, plus listed versions 4.1.11a-44.1.11a-4sarge14.1.11a-4sarge24.1.11a-4sarge34.1.11a-4sarge44.1.11a-4sarge54.1.11a-4sarge7 |
4.1.11a-4sarge8 |
mysql-dfsg-5.0Debian:5.0 |
before 5.0.45-1+lenny1 | 5.0.45-1+lenny1 |
mysqlRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-benchRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-serverRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
Show 36 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mysql-benchRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-serverRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysqlRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-benchRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-serverRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-benchRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysql-serverRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs |
before 0:4.1.20-3.RHEL4.1.el4_6.1 | 0:4.1.20-3.RHEL4.1.el4_6.1 |
mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-benchRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-serverRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-testRed Hat:enterprise_linux:5::client_workstation From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysqlRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysqlRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-benchRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-develRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-serverRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysql-testRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs |
before 0:5.0.22-2.2.el5_1.1 | 0:5.0.22-2.2.el5_1.1 |
mysqlRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-benchRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-clusterRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-develRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-libsRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-serverRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
mysql-testRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:5.0.44-2.el4s1.1 | 0:5.0.44-2.el4s1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MySQL 5.1.23 - Server InnoDB CONVERT_SEARCH_MODE_TO_INNOBASE Function Denial of Service | 2007-11-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5925 is a medium vulnerability (CVSS 4.0) in Mysql, published November 10, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 96th percentile. Fixed in mysql-dfsg-5.0 5.0.45-1+lenny1.
References
secunia.com/advisories/27823
ubuntu.com/usn/USN-1397-1
security.gentoo.org/glsa/glsa-200711-25.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11390
vupen.com/english/advisories/2007/3903
Show 40 moreShow less
securitytracker.com/id?1018978
usn.ubuntu.com/559-1
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959
debian.org/security/2007/dsa-1413
redhat.com/archives/fedora-package-announce/2007-December/msg00467.html
lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html
securityfocus.com/bid/26353
bugs.gentoo.org/show_bug.cgi?id=198988
mandriva.com/security/advisories?name=MDKSA-2007:243
lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
bugs.mysql.com/bug.php?id=32125
exchange.xforce.ibmcloud.com/vulnerabilities/38284
nvd.nist.gov/vuln/detail/CVE-2007-5925
github.com/advisories/GHSA-7qx6-9mjj-x6hf
access.redhat.com/errata/RHSA-2007:1155
bugzilla.redhat.com/show_bug.cgi?id=377451
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_1155.json
cve.org/CVERecord?id=CVE-2007-5925