Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle MySQL 安全漏洞
Vulnerability Description
Oracle MySQL是美国甲骨文(Oracle)公司的一套开源的关系数据库管理系统。 MySQL 3.23.55之前版本在处理mysql_change_user()函数时存在设计问题,远程攻击者可以利用这个漏洞使mysqld崩溃。mysql_change_user()函数中存在设计问题,造成对同一内存释放两次,更改MySQL客户端并利用这个漏洞可导致mysqld崩溃。不过这个漏洞的利用需要使用合法用户帐户登录服务程序来进行触发。
CVSS Information
N/A
Vulnerability Type
N/A