CVE-2009-4019

no score yetEPSS 16%

No CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2009-11-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mysql:mysql
oracle:mysql

References

http://bugs.mysql.com/47780
http://bugs.mysql.com/48291
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-88.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-41.html
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

Check your stack JSON