Multiple Denial of Service Vulnerabilities in MariaDB

Release date: 2012-09-07
Updated on:

Affected Systems:
MariaDB 5.x
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55460

MariaDB is a database server that provides accidental replacement for MySQL.

MariaDB 5.5.25 and other versions have Multiple Denial of Service Vulnerabilities. Attackers can exploit these vulnerabilities to crash the database server.

1) when executing a subquery, there is a null pointer reference error in the "test_if_skip_sort_order ()" function (SQL _select.cc). A specially crafted query can cause the service to crash.

2) when processing subqueries that can release some currently used tables, there is an error in the "select_describe ()" function (SQL/SQL _select.cc). Specially crafted queries can cause a crash.

3) handle query cache errors when running parallel queries. A crash can be caused by running special queries in parallel.

<* Source: jbergstroem

Link: http://secunia.com/advisories/50485/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

MariaDB
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://mariadb.org/