UpHeron
All vulnerabilities

Servers and applications

CVE-2009-4019

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Severity
Medium 4.0
Published
30 Nov 2009
Last changed
16 Jun 2026
Added to UpHeron
21 Oct 2026
Exploit chance
16% in the next 30 daysHigher than 96% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack
Over the network · Needs a login
Attacker can
Slow it down
CVSS vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Sources
NVD

Affected software

SoftwareAffected versions
MySQLServers and applications · cpe:a:oracle:mysql
  • Version 5.1.30
  • Version 5.1.22
  • Version 5.1.21
  • Version 5.1.20
All 56 release lines
  • Version 5.0.0-alpha
  • Version 5.0.3-beta
  • Version 5.0.6
  • Version 5.0.7
  • Version 5.0.8
  • Version 5.0.11
  • Version 5.0.12
  • Version 5.0.13
  • Version 5.0.14
  • Version 5.0.18
  • Version 5.0.19
  • Version 5.0.21
  • Version 5.0.22
  • Version 5.0.23
  • Version 5.0.25
  • Version 5.0.26
  • Version 5.0.27
  • Version 5.0.30-sp1
  • Version 5.0.32
  • Version 5.0.33
  • Version 5.0.37
  • Version 5.0.38
  • Version 5.0.41
  • Version 5.0.42
  • Version 5.0.45
  • Version 5.0.50
  • Version 5.0.51
  • Version 5.0.51a
  • Version 5.0.52
  • Version 5.0.75
  • Version 5.0.77
  • Version 5.0.81
  • Version 5.0.83
  • Version 5.1
  • Version 5.1.1
  • Version 5.1.2
  • Version 5.1.3
  • Version 5.1.4
  • Version 5.1.6
  • Version 5.1.7
  • Version 5.1.8
  • Version 5.1.9
  • Version 5.1.10
  • Version 5.1.11
  • Version 5.1.12
  • Version 5.1.13
  • Version 5.1.14
  • Version 5.1.15
  • Version 5.1.16
  • Version 5.1.17
  • Version 5.1.18
  • Version 5.1.19
  • Version 5.1.20
  • Version 5.1.21
  • Version 5.1.22
  • Version 5.1.30

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2009-4019
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2009-4019