CVE-2007-5925

mysql DoS in the InnoDB Engine

Published Nov 10, 2007 CVSS 2.0 · 4.0 Medium EPSS 11.4% KEV · Not listed
Description
The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1413-1 New mysql packages fix multiple vulnerabilities
Ubuntu USN Ubuntu USN USN-559-1 MySQL vulnerabilities
Ubuntu USN Ubuntu USN USN-1397-1 MySQL vulnerabilities
References
Link Providers
http://bugs.gentoo.org/show_bug.cgi?id=198988 cve-icon cve-icon
http://bugs.mysql.com/bug.php?id=32125 cve-icon cve-icon
http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html cve-icon cve-icon
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html cve-icon cve-icon
http://secunia.com/advisories/27568 cve-icon cve-icon
http://secunia.com/advisories/27649 cve-icon cve-icon
http://secunia.com/advisories/27823 cve-icon cve-icon
http://secunia.com/advisories/28025 cve-icon cve-icon
http://secunia.com/advisories/28040 cve-icon cve-icon
http://secunia.com/advisories/28099 cve-icon cve-icon
http://secunia.com/advisories/28108 cve-icon cve-icon
http://secunia.com/advisories/28128 cve-icon cve-icon
http://secunia.com/advisories/28838 cve-icon cve-icon
http://security.gentoo.org/glsa/glsa-200711-25.xml cve-icon cve-icon
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.428959 cve-icon cve-icon
http://www.debian.org/security/2007/dsa-1413 cve-icon cve-icon
http://www.mandriva.com/security/advisories?name=MDKSA-2007:243 cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-1155.html cve-icon cve-icon
http://www.redhat.com/support/errata/RHSA-2007-1157.html cve-icon cve-icon
http://www.securityfocus.com/bid/26353 cve-icon cve-icon
http://www.securitytracker.com/id?1018978 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-1397-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2007/3903 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/38284 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2007-5925 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11390 cve-icon cve-icon
https://usn.ubuntu.com/559-1/ cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2007-5925 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00467.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00475.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 3:47 PM
Reserved
Nov 9, 2007, 12:00 AM
Status
Modified
Published
Nov 10, 2007, 2:46 AM
Modified
Jun 16, 2026, 10:47 PM
Severity
Low
Public date
Nov 5, 2007, 12:00 AM