Bug 377451 (CVE-2007-5925)

Summary:

CVE-2007-5925 mysql DoS in the InnoDB Engine

Product:

[Other] Security Response

Reporter:

Tomas Hoger <thoger>

Component:

vulnerability

Assignee:

Red Hat Product Security <security-response-team>

Status:

CLOSED ERRATA

QA Contact:

Severity:

low

Docs Contact:

Priority:

low

Version:

unspecified

CC:

kreilly, tgl

Target Milestone:

---

Keywords:

Security

Target Release:

---

Hardware:

All

OS:

Linux

URL:

http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5925

Whiteboard:

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2007-12-19 16:36:03 UTC

Type:

---

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Bug Depends On:

422161, 422171, 422181, 422191, 422201, 422211, 424921, 424931

Bug Blocks:

Attachments:

Description	Flags
Patch against 5.0.45	none

Description Tomas Hoger 2007-11-12 10:28:56 UTC

Common Vulnerabilities and Exposures assigned an identifier CVE-2007-5925 to the following vulnerability:

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB
engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to
cause a denial of service (database crash) via a certain CONTAINS operation on
an indexed column, which triggers an assertion error.

References:
http://bugs.mysql.com/bug.php?id=32125
http://lists.grok.org.uk/pipermail/full-disclosure/2007-November/067350.html
http://xforce.iss.net/xforce/xfdb/38284

Comment 3 Tomas Hoger 2007-11-21 17:29:00 UTC

Created attachment 266161 [details]
Patch against 5.0.45

Bug is private, but bug attachments are not:

http://bugs.mysql.com/file.php?id=7802&text=1

Comment 10 Tomas Hoger 2007-12-19 16:36:03 UTC

Problem was fixed in all affected supported products:

Red Hat Enterprise Linux:
  http://rhn.redhat.com/errata/RHSA-2007-1155.html

Red Hat Application Stack:  	
  http://rhn.redhat.com/errata/RHSA-2007-1157.html

Fedora:
  https://admin.fedoraproject.org/updates/F7/FEDORA-2007-4471
  https://admin.fedoraproject.org/updates/F8/FEDORA-2007-4465