CVE-2013-1861 : MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69

MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.

Published 2013-03-28 23:55:02

Updated 2022-08-04 19:56:04

Source Red Hat, Inc.

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Threat overview for CVE-2013-1861

Top countries where our scanners detected CVE-2013-1861

Top open port discovered on systems with this issue 53

IPs affected by CVE-2013-1861 20,647

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2013-1861!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2013-1861

Probability of exploitation activity in the next 30 days: 94.94%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 99 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2013-1861

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial

CWE ids for CVE-2013-1861

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2013-1861

https://exchange.xforce.ibmcloud.com/vulnerabilities/82895

Oracle MySQL and MariaDB geometry queries denial of service CVE-2013-1861 Vulnerability Report
Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html

openSUSE-SU-2013:1335-1: moderate: update for mariadb, mysql-community-s
Mailing List;Third Party Advisory

CVEs referencing this url
http://seclists.org/oss-sec/2013/q1/671

oss-sec: CVE-2013-1861 for MySQL/MariaDB: geometry query crashes mysqld
Mailing List;Third Party Advisory
http://lists.askmonty.org/pipermail/commits/2013-March/004371.html

[Commits] Rev 3682: TODO-424 geometry query crashes server. in file:///home/hf/wmar/todo-424/
Mailing List;Third Party Advisory
https://mariadb.atlassian.net/browse/MDEV-4252

[MDEV-4252] geometry query crashes server - JIRA
Broken Link
http://www.ubuntu.com/usn/USN-1909-1

USN-1909-1: MySQL vulnerabilities | Ubuntu security notices
Third Party Advisory

CVEs referencing this url
http://www.debian.org/security/2013/dsa-2818

Debian -- Security Information -- DSA-2818-1 mysql-5.5
Third Party Advisory

CVEs referencing this url
https://bugzilla.redhat.com/show_bug.cgi?id=919247

919247 – (CVE-2013-1861) CVE-2013-1861 mysql: geometry query crashes mysqld (CPU July 2013)
Issue Tracking;Third Party Advisory
http://security.gentoo.org/glsa/glsa-201409-04.xml

MySQL: Multiple vulnerabilities (GLSA 201409-04) — Gentoo security
Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html

openSUSE-SU-2013:1410-1: moderate: update for mysql-community-server
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/58511

MySQL and MariaDB Geometry Query Denial Of Service Vulnerability
Exploit;Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html

[security-announce] SUSE-SU-2013:1529-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html

[security-announce] SUSE-SU-2013:1390-1: important: Security update for
Mailing List;Third Party Advisory

CVEs referencing this url
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html

Oracle Critical Patch Update - July 2013
Third Party Advisory

CVEs referencing this url

Products affected by CVE-2013-1861