{"schemaVersion":3,"id":"CVE-2004-0836","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).","dates":{"published":"2004-10-16T04:00:00.000Z","modified":"2024-08-08T00:31:47.560Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.09801,"percentile":0.95509,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.09801},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.09801,"percentile":0.95509}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.09801,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.09801,"percentile":0.95509}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_D07FD3E4E65BA8D2","name":"Exploit Reference (bugs.mysql.com)","source":"reference","url":"http://bugs.mysql.com/bug.php?id=4017","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-119","name":"Improper Restriction of Operations within the Bounds of a Memory Buffer","description":"The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/119.html"}],"affected":[{"vendor":"debian","product":"debian_linux","name":"debian linux","label":"debian_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0","eol":{"isEol":true,"eolDate":"2006-06-30T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"3.0","label":"3.0 (Woody)","eolFrom":"2006-06-30T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"3.0r6"},"product":{"name":"debian","label":"Debian","category":"os"}},"hubHref":"/vendor/debian/debian_linux"},{"vendor":"oracle","product":"mysql","name":"mysql","label":"mysql","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 3.20, < 3.23.49","noFixRecorded":false,"fixedIn":null},{"text":"≥ 4.0.0, < 4.0.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 3.20, < 3.23.49 | ≥ 4.0.0, < 4.0.21","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"mysql","label":"MySQL","category":"database"}},"hubHref":"/vendor/oracle/mysql"}],"affectedCount":2,"eol":{"hasEol":true,"count":1},"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2004-611.html","label":"www.redhat.com/support/errata/RHSA-2004-611.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Patch"]},{"url":"http://www.securityfocus.com/bid/10981","label":"www.securityfocus.com/bid/10981","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"http://www.debian.org/security/2004/dsa-562","label":"www.debian.org/security/2004/dsa-562","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=110140517515735&w=2","label":"marc.info?l=bugtraq&m=110140517515735&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17047","label":"exchange.xforce.ibmcloud.com/vulnerabilities/17047","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://secunia.com/advisories/12305/","label":"secunia.com/advisories/12305/","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","label":"distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000892","hostname":"distro.conectiva.com.br","tags":["Vendor Advisory","X Refsource CONECTIVA","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-597.html","label":"www.redhat.com/support/errata/RHSA-2004-597.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Patch"]},{"url":"http://www.ciac.org/ciac/bulletins/p-018.shtml","label":"www.ciac.org/ciac/bulletins/p-018.shtml","hostname":"www.ciac.org","tags":["Third Party Advisory","Government Resource","X Refsource CIAC","Broken Link"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-22.xml","label":"www.gentoo.org/security/en/glsa/glsa-200410-22.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.trustix.org/errata/2004/0054/","label":"www.trustix.org/errata/2004/0054/","hostname":"www.trustix.org","tags":["Vendor Advisory","X Refsource TRUSTIX"]},{"url":"http://lists.mysql.com/internals/14726","label":"lists.mysql.com/internals/14726","hostname":"lists.mysql.com","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"http://bugs.mysql.com/bug.php?id=4017","label":"bugs.mysql.com/bug.php?id=4017","hostname":"bugs.mysql.com","tags":["X Refsource MISC","Exploit","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-562-2"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-10-16T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T00:31:47.560Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:20:31.511Z","stale":false,"partial":false}}