VDB
CVE-2004-0837
CVE-2004-0837
PUBLISHED
CVSS 2.5999999046325684 LOW
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
EPSS 4.90% · 91.4th percentile
Risk Scores
CVSS 2.0
2.5999999046325684
EPSS Score
4.90%
91.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| oracle | mysql | 3.20, 4.0.0 |
| debian | debian_linux | 3.0 |
| mysql | mysql | 4.1.0 |
| n/a | n/a | n/a |
Timeline
- Oct 16, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 19, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 18, 2023 EPSS Score
- Oct 31, 2023 EPSS Score
References
- mysql-union-dos(17667) vdb
- DSA-562 vendor-advisory
- CLA-2004:892 vendor-advisory
- RHSA-2004:597 vendor-advisory
- GLSA-200410-22 vendor-advisory
- 2004-0054 vendor-advisory
- 1011606 vdb
- http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c%401.15 url
- https://nvd.nist.gov/vuln/detail/CVE-2004-0837 advisory
- http://lists.mysql.com/internals/16168 url
- http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c@1.15 url
- http://secunia.com/advisories/12783 url
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-101864-1 url
- http://www.ciac.org/ciac/bulletins/p-018.shtml url
- http://www.securityfocus.com/bid/11357 url
- http://www.trustix.org/errata/2004/0054 url
- http://lists.mysql.com/internals/16173 advisory
- http://lists.mysql.com/internals/16174 advisory
- http://secunia.com/advisories/12783/ advisory
- http://bugs.mysql.com/2408 exploit
…and 2 more