News Menu |
|
|
Site Menu |
|
|
Site Affiliates |
|
|
Advertisements |
|
|
|
|
|
|
| |
Two Security alerts have raised and an update issued for mysql. This fixes multiple vulnerabilities, which can be exploited by malicious users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially compromise the system.
Two vulnerabilities have been reported in MySQL, which can be exploited by malicious users to bypass certain security restrictions or cause a DoS (Denial of Service).
1) An error in "ALTER TABLE ... RENAME" operations causes the CREATE/INSERT rights of old tables to be checked, which potentially can be exploited to bypass some applied security restrictions.
The vulnerability has been reported in version 3.23. Other versions may also be affected.
2) It is possible to crash or stall the server when multiple threads ALTER the same or different MERGE tables to change the UNION.
The vulnerability has been reported in version 3.23 and 4.0.18. Other versions may also be affected.
View: Secunia Advisory: SA12784
View: Secunia Advisory: SA12783
|
| There are 0 additional comments, Post a comment | View printable post | Open/Close All Comments |
|
|
|
|