← Database

CVE-2009-0819

MEDIUM CVSS: 4.0 Published: 2009-03-05 Modified: 2026-06-16

Description

sql/item_xmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service (crash) via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue() or UpdateXML()," which triggers an assertion failure.

Affected Platforms

Mysql MysqlOracle Mysql

Weakness Type

NVD-CWE-Other

References