VULNERABILITY INTELLIGENCE

CVE-2008-3963

CVSS score4 MEDIUM
EPSS probability6.46%
CISA KEVNot currently listed
Published2008-09-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

MySQL 5.0 before 5.0.66, 5.1 before 5.1.26, and 6.0 before 6.0.6 does not properly handle a b'' (b single-quote single-quote) token, aka an empty bit-string literal, which allows remote attackers to cause a denial of service (daemon crash) by using this token in a SQL statement.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references