Skip to content
Fencer Vulns
medium 4.0

CVE-2009-4019 json

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statemen…

published 2009-11-30 16 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3990

cvss
4.0
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
16.3%
EPSS 16.3% chance of exploitation in 30 days, percentile 96%
public exploits
2
Exploit-DB

Summary

mysqld in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41 does not (1) properly handle errors during execution of certain SELECT statements with subqueries, and does not (2) preserve certain null_value flags during execution of statements that use the GeomFromWKB function, which allows remote authenticated users to cause a denial of service (daemon crash) via a crafted statement.

Patch / fix

  • mysql RHEL 5 5.0.77-4.el5_4.2
  • mysql-test RHEL 5 5.0.77-4.el5_4.2
  • mysql-bench RHEL 5 5.0.77-4.el5_4.2
  • mysql-server RHEL 5 5.0.77-4.el5_4.2

red hat advisories RHSA-2010:0109

  • mariadb104 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 10.4.30-8.5.46
  • lz4 SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.8.0-3.5.2
  • python-mysqlclient SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 1.3.14-8.9.2
  • mariadb-connector-c SLES for SAP 12 SP5, SLES 12 SP5, SLE Software Development Kit 12 SP5 3.1.22-2.35.1
  • mariadb104 SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS 10.4.30-150100.3.5.10
  • python-mysqlclient SLES for SAP 15 SP1, SLES 15 SP1-LTSS, SLE High Performance Computing 15 SP1-LTSS 1.4.6-150100.3.3.7

suse advisories SUSE-RU-2023:4991-1SUSE-RU-2023:3956-1

  • mariadb openSUSE Tumbleweed 10.0.22-3.8

opensuse advisories openSUSE-SU-2024:10153-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2009-4019 updated cvss 2.7

mysql: DoS (crash) when comparing GIS items from subquery and when handling subqueires in WHERE and assigning a SELECT result to a @variable

  • Red Hat Enterprise Linux (v. 5 server) mysql 5.0.77-4.el5_4.2, mysql-test 5.0.77-4.el5_4.2, mysql-bench 5.0.77-4.el5_4.2, mysql-server 5.0.77-4.el5_4.2 Red Hat Enterprise Linux Desktop (v. 5 client) mysql 5.0.77-4.el5_4.2, mysql-test 5.0.77-4.el5_4.2, mysql-bench 5.0.77-4.el5_4.2, mysql-server 5.0.77-4.el5_4.2 Red Hat Enterprise Linux Desktop Workstation (v. 5 client) mysql 5.0.77-4.el5_4.2, mysql-test 5.0.77-4.el5_4.2, mysql-bench 5.0.77-4.el5_4.2, mysql-server 5.0.77-4.el5_4.2
    fixed: vendor fix RHSA-2010:0109

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (EDB-33398)
  2. Published

Exploit prediction

16.26% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-33398 MySQL 6.0.9 - 'GeomFromWKB()' Function First Argument Geometry Value Handling Denial of Service dos, 2009-11-23
  • EDB-33397 MySQL 6.0.9 - SELECT Statement WHERE Clause Sub-query Denial of Service dos, 2009-11-23

CVSS scores

assigned by version score vector
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:N/I:N/A:P

Classification

Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.