CVE-2007-5925

Publication date 10 November 2007

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The convert_search_mode_to_innobase function in ha_innodb.cc in the InnoDB engine in MySQL 5.1.23-BK and earlier allows remote authenticated users to cause a denial of service (database crash) via a certain CONTAINS operation on an indexed column, which triggers an assertion error.

Read the notes from the security team

Status

Package Ubuntu Release Status
mysql-dfsg-5.0 7.10 gutsy
Fixed 5.0.45-1ubuntu3.1
7.04 feisty
Fixed 5.0.38-0ubuntu1.2
6.10 edgy
Fixed 5.0.24a-9ubuntu2.2
6.06 LTS dapper
Fixed 5.0.22-0ubuntu6.06.6

Notes

jdstrand

unrelated LP bug #161127 should be fixed with this update

References

Related Ubuntu Security Notices (USN)

    • USN-559-1
    • MySQL vulnerabilities
    • 21 December 2007

Other references