Back
CVE-2013-1861
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier,…
Medium5.0EPSS 18.8%
- Published
- Updated
- Reserved
- Assigned by
- redhat
Description
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
- EPSS (exploitation in 30 days)
- 18.8% · top 2.7% of all CVEs (6 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.
Weakness
Affected products
n/a
- affected n/a
References (17)
- 54300 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- DSA-2818 (opens in a new tab)vendor-advisoryx_refsource_DEBIANx_transferred
- [oss-security] 20130513 CVE-2013-1861 for MySQL/MariaDB: geometry query crashes mysqld (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html (opens in a new tab)x_refsource_CONFIRMx_transferred
- mysql-mariadb-cve20131861-dos(82895) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- https://mariadb.atlassian.net/browse/MDEV-4252 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 52639 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- openSUSE-SU-2013:1335 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- 58511 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- USN-1909-1 (opens in a new tab)vendor-advisoryx_refsource_UBUNTUx_transferred
- SUSE-SU-2013:1390 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- [Commits] 20130305 Rev 3682: TODO-424 geometry query crashes server. in file:///home/hf/wmar/todo-424/ (opens in a new tab)mailing-listx_refsource_MLISTx_transferred
- openSUSE-SU-2013:1410 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- 91415 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- https://bugzilla.redhat.com/show_bug.cgi?id=919247 (opens in a new tab)x_refsource_MISCx_transferred
- SUSE-SU-2013:1529 (opens in a new tab)vendor-advisoryx_refsource_SUSEx_transferred
- GLSA-201409-04 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2013-1861)Record last updated .