{"id":"CVE-2013-1861","aliases":["DSA-2780-1","DSA-2818-1","EUVD-2013-1864","GHSA-5cv5-75c5-879q","RHBA-2013:1647","SUSE-SU-2015:0620-1","SUSE-SU-2015:0946-1","SUSE-SU-2015:1177-1"],"status":"published","title":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68,...","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.18821,"percentile":0.97303,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2013-03-28T23:00:00Z","modified":"2026-06-29T10:04:56Z","exploits":[{"source":"exploitdb","id":"EDB-38392","title":"MySQL / MariaDB - Geometry Query Denial of Service","type":"dos","platform":"linux","date":"2013-03-07","verified":true,"url":"https://www.exploit-db.com/exploits/38392"}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"mysql-5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.72-2"}]}],"versions":["5.1.49-3","5.1.50-1","5.1.51-1","5.1.53-1","5.1.54-1","5.1.54-2","5.1.55-1","5.1.56-1","5.1.57-1","5.1.57-1.1","5.1.57-1.2","5.1.57-1.3","5.1.57-2","5.1.57-3","5.1.57-3.1","5.1.58-1","5.1.61-0+squeeze1","5.1.61-2","5.1.61-3","5.1.62-1","5.1.62-1+m68k","5.1.63-0+squeeze1","5.1.66-0+squeeze1"],"bundled":32},{"source":"osv","ecosystem":"Debian:7","package":"mysql-5.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.5.33+dfsg-0+wheezy1"}]}],"versions":["5.5.30+dfsg-1.1","5.5.31+dfsg-0+wheezy1","5.5.31+dfsg-1"],"bundled":10},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-embedded-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-bench","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"mysql-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.71-1.el6"}]}],"bundled":4}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"mariadb","product":"mariadb"},{"vendor":"opensuse","product":"opensuse"},{"vendor":"oracle","product":"mysql"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://secunia.com/advisories/54300","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable"]},{"url":"http://www.debian.org/security/2013/dsa-2818","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory"]},{"url":"http://seclists.org/oss-sec/2013/q1/671","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82895","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://mariadb.atlassian.net/browse/MDEV-4252","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/52639","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/58511","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-1909-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.askmonty.org/pipermail/commits/2013-March/004371.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.osvdb.org/91415","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","Broken Link"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=919247","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://security.gentoo.org/glsa/glsa-201409-04.xml","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1861","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-5cv5-75c5-879q"},{"url":"https://access.redhat.com/errata/RHBA-2013:1647","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=842052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=904061","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhba-2013_1647.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-1861","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-1861","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-3802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985683","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3802","tags":["advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html#AppendixMSQL","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-3804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=985687","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3804","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3804","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2013-3839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1019978","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2013-3839","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3839","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150620-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/734436","tags":["report"]},{"url":"https://bugzilla.suse.com/768832","tags":["report"]},{"url":"https://bugzilla.suse.com/780019","tags":["report"]},{"url":"https://bugzilla.suse.com/789263","tags":["report"]},{"url":"https://bugzilla.suse.com/791863","tags":["report"]},{"url":"https://bugzilla.suse.com/792332","tags":["report"]},{"url":"https://bugzilla.suse.com/803040","tags":["report"]},{"url":"https://bugzilla.suse.com/830086","tags":["report"]},{"url":"https://bugzilla.suse.com/834028","tags":["report"]},{"url":"https://bugzilla.suse.com/834967","tags":["report"]},{"url":"https://bugzilla.suse.com/837801","tags":["report"]},{"url":"https://bugzilla.suse.com/857678","tags":["report"]},{"url":"https://bugzilla.suse.com/858823","tags":["report"]},{"url":"https://bugzilla.suse.com/861493","tags":["report"]},{"url":"https://bugzilla.suse.com/868673","tags":["report"]},{"url":"https://bugzilla.suse.com/873896","tags":["report"]},{"url":"https://bugzilla.suse.com/878779","tags":["report"]},{"url":"https://bugzilla.suse.com/887580","tags":["report"]},{"url":"https://bugzilla.suse.com/901237","tags":["report"]},{"url":"https://bugzilla.suse.com/914058","tags":["report"]},{"url":"https://bugzilla.suse.com/922043","tags":["report"]},{"url":"https://bugzilla.suse.com/927623","tags":["report"]},{"url":"https://bugzilla.suse.com/934789","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2012-5615","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-1861","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3783","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3793","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3794","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3801","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3802","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3804","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3805","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3806","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3807","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3808","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3811","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-3812","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5860","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5882","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5891","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5894","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-5908","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0384","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0402","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0412","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0420","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0427","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2419","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-2494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3572","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4214","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4233","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4238","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4240","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4243","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4258","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4260","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4274","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-4287","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6463","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6474","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6478","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6489","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6491","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6494","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6495","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6520","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6530","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6551","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6555","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6559","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6564","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-6568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-8275","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0204","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0205","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0206","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0374","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0381","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0385","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0391","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0405","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0423","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0498","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0499","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0500","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0501","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0503","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0505","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0506","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0508","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-0511","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2305","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2566","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2567","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2571","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2573","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2576","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-4000","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150946-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2015/suse-su-20151177-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2013-1861","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","status":"published","published":"2013-03-28T23:00:00Z","modified":"2024-08-06T15:20:35.199Z","updated_at":"2026-11-02T14:34:58.882751Z"}],"euvd":[{"id":"EUVD-2013-1864","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","status":"published","published":"2013-03-28T23:00:00Z","modified":"2024-08-06T15:20:35Z","updated_at":"2026-11-03T01:56:40.540333Z"}],"ghsa":[{"id":"GHSA-5cv5-75c5-879q","title":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68,...","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","status":"published","published":"2022-05-14T01:08:03Z","modified":"2023-02-02T05:03:00Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:51:33.40906Z"}],"nvd":[{"id":"CVE-2013-1861","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","status":"published","published":"2013-03-28T23:55:01.763Z","modified":"2026-06-16T23:52:15.807Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:24.091325Z"}],"osv":[{"id":"DSA-2780-1","title":"mysql-5.1 - several","status":"published","published":"2013-10-18T00:00:00Z","modified":"2026-03-09T01:20:17.858981Z","updated_at":"2026-11-02T15:46:15.489951Z"},{"id":"DSA-2818-1","title":"mysql-5.5 - several","status":"published","published":"2013-12-16T00:00:00Z","modified":"2026-03-09T01:18:19.361987Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"RHBA-2013:1647","title":"Red Hat Bug Fix Advisory: mysql bug fix update","status":"published","published":"2024-09-15T21:01:48Z","modified":"2026-06-29T10:04:56Z","updated_at":"2026-11-02T15:52:58.117212Z"},{"id":"SUSE-SU-2015:0620-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T04:24:15.175685Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:0946-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:29:58.141198Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2015:1177-1","title":"Security update for MySQL","description":"\nThis MySQL update provides the following:\n\n    * upgrade to version 5.5.39, [bnc#887580]\n    * CVE's fixed: CVE-2014-2484, CVE-2014-4258, CVE-2014-4260,\n      CVE-2014-2494, CVE-2014-4238, CVE-2014-4207, CVE-2014-4233,\n      CVE-2014-4240, CVE-2014-4214, CVE-2014-4243\n\nSee also:\nhttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\n\u003chttp://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html\u003e\n\nSecurity Issues:\n\n    * CVE-2014-2484\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2484\u003e\n    * CVE-2014-4258\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4258\u003e\n    * CVE-2014-4260\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4260\u003e\n    * CVE-2014-2494\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2494\u003e\n    * CVE-2014-4238\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4238\u003e\n    * CVE-2014-4207\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4207\u003e\n    * CVE-2014-4233\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4233\u003e\n    * CVE-2014-4240\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4240\u003e\n    * CVE-2014-4214\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4214\u003e\n    * CVE-2014-4243\n      \u003chttp://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4243\u003e\n\n","status":"published","published":"2014-08-19T23:56:10Z","modified":"2026-02-04T02:16:44.028585Z","updated_at":"2026-11-02T15:53:43.030986Z"}]}}