CVE-2013-1861
MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.
Key facts
- CVSS score
- 5.0 (v2.0)
- Severity
- MEDIUM
- CVSS vector
AV:N/AC:L/Au:N/C:N/I:N/A:P- Weakness (CWE)
- CWE-119
- EPSS score
- 18.8% (97th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2013-1864)
- Published
- March 28, 2013
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2013-1864 in the EU Vulnerability Database. Last updated in EUVD on August 6, 2024.
View on the EU Vulnerability DatabaseAffected products
- canonical / ubuntu linux
- canonical / ubuntu linux
- canonical / ubuntu linux
- canonical / ubuntu linux
- debian / debian linux
- mariadb / mariadb
- opensuse / opensuse
- opensuse / opensuse
- opensuse / opensuse
- oracle / mysql
- redhat / enterprise linux
- redhat / enterprise linux
- suse / linux enterprise desktop
- suse / linux enterprise server
- suse / linux enterprise server
- suse / linux enterprise software development kit
Certified products that may be affected
8 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- SUSE Linux Enterprise Server 11 Service Pack 2 on IBM System z - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0852-2013 - archived
- SUSE Linux Enterprise Server 11 Service Pack 2 including KVM virtualization - SUSE Linux Products Gmbh - Common Criteria BSI-DSZ-CC-0787-2013 - archived
- Red Hat Enterprise Linux 5 OpenSSH-Server Cryptographic Module - Red Hat®, Inc. - FIPS 140 1384 - historical
- Red Hat Enterprise Linux 5 OpenSSH Client Cryptographic Module - Red Hat®, Inc. - FIPS 140 1385 - historical
- Red Hat Enterprise Linux 5 OpenSwan Cryptographic Module - Red Hat®, Inc. - FIPS 140 1386 - historical
See all 8 in the Security Certifications Explorer.
References
- http://lists.askmonty.org/pipermail/commits/2013-March/004371.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html(Mailing List, Third Party Advisory)
- http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html(Mailing List, Third Party Advisory)
- http://seclists.org/oss-sec/2013/q1/671(Mailing List, Third Party Advisory)
- http://secunia.com/advisories/52639(Not Applicable)
- http://secunia.com/advisories/54300(Not Applicable)
- http://security.gentoo.org/glsa/glsa-201409-04.xml(Third Party Advisory)
- http://www.debian.org/security/2013/dsa-2818(Third Party Advisory)
- http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html(Third Party Advisory)
- http://www.osvdb.org/91415(Broken Link)
- http://www.securityfocus.com/bid/58511(Exploit, Third Party Advisory, VDB Entry)
- http://www.ubuntu.com/usn/USN-1909-1(Third Party Advisory)
- https://bugzilla.redhat.com/show_bug.cgi?id=919247(Issue Tracking, Third Party Advisory)
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82895(Third Party Advisory, VDB Entry)
- https://mariadb.atlassian.net/browse/MDEV-4252(Broken Link)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain