{"id":"CVE-2013-1861","url":"https://www.cyber-defence.io/tools/cve/CVE-2013-1861","generatedAt":"2026-11-05T07:40:07.298Z","title":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted…","description":"MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers to cause a denial of service (crash) via a crafted geometry feature that specifies a large number of points, which is not properly handled when processing the binary representation of this feature, related to a numeric calculation error.","published":"2013-03-28T23:55:02.000Z","lastModified":"2026-06-16T23:52:16.000Z","status":"Modified","sourceIdentifier":"secalert@redhat.com","cvss":{"version":"2.0","score":5,"severity":"MEDIUM","vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P"},"cwe":["CWE-119"],"affected":["mariadb/mariadb","oracle/mysql","redhat/enterprise linux","debian/debian linux","canonical/ubuntu linux","opensuse/opensuse","suse/linux enterprise desktop","suse/linux enterprise server","suse/linux enterprise software development kit"],"epss":{"score":0.18821,"percentile":0.97291,"date":"2026-11-04","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":true,"firstPublished":"2013-03-07","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":38392,"kind":"exploit","title":"MySQL / MariaDB - Geometry Query Denial of Service","url":"https://www.exploit-db.com/exploits/38392","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/38392.txt","file":"exploits/linux/dos/38392.txt","published":"2013-03-07","added":"2013-03-07","updated":"2015-10-03","author":"Alyssa Milburn","type":"dos","platform":"linux","port":null,"verified":true,"codes":["CVE-2013-1861","OSVDB-91415"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":"https://www.securityfocus.com/bid/58511/info"}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 18.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"http://lists.askmonty.org/pipermail/commits/2013-March/004371.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://seclists.org/oss-sec/2013/q1/671","tags":["Mailing List","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/52639","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/54300","tags":["Not Applicable"],"source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-201409-04.xml","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.debian.org/security/2013/dsa-2818","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"http://www.osvdb.org/91415","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/58511","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"http://www.ubuntu.com/usn/USN-1909-1","tags":["Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=919247","tags":["Issue Tracking","Third Party Advisory"],"source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82895","tags":["Third Party Advisory","VDB Entry"],"source":"secalert@redhat.com"},{"url":"https://mariadb.atlassian.net/browse/MDEV-4252","tags":["Broken Link"],"source":"secalert@redhat.com"},{"url":"http://lists.askmonty.org/pipermail/commits/2013-March/004371.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-08/msg00022.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2013-10/msg00001.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-08/msg00024.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-updates/2013-09/msg00008.html","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://seclists.org/oss-sec/2013/q1/671","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/52639","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/54300","tags":["Not Applicable"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-201409-04.xml","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2013/dsa-2818","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/91415","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/58511","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-1909-1","tags":["Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=919247","tags":["Issue Tracking","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/82895","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://mariadb.atlassian.net/browse/MDEV-4252","tags":["Broken Link"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2013-1861","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}