CVE-2010-3837

no score yetEPSS 3.4%

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service (server crash) via a prepared statement that uses GROUP_CONCAT with the WITH ROLLUP modifier, probably triggering a use-after-free error when a copied object is modified in a way that also affects the original object.

EPSS: 3.4% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2011-01-14
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mysql:mysql
oracle:mysql

References

http://bugs.mysql.com/bug.php?id=54476
http://dev.mysql.com/doc/refman/5.0/en/news-5-0-92.html
http://dev.mysql.com/doc/refman/5.1/en/news-5-1-51.html
http://dev.mysql.com/doc/refman/5.5/en/news-5-5-6.html
http://lists.apple.com/archives/security-announce/2011//Jun/msg00000.html

Check your stack JSON