CVE-2007-2583: canonical ubuntu_linux

Modified

Published 09-05-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-2583 is a medium (CVSS 4.0) vulnerability in canonical ubuntu_linux. EPSS estimates a 11.31% chance of exploitation in the next 30 days, higher than 95.9% of scored vulnerabilities. 1 public exploit is recorded.

Priority

Routine

Not severe (CVSS 4, network access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.0/10

010

Medium · v2.0 (NVD)

EPSS score

11.31%

0%100%

Medium · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 2

DSA-1413-1 RHSA-2008:0364

Timeline

09-05-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.

CVSS metrics

1 score · 1 source · 1 version

v2.04.0

EPSS trend

Probability

11.31%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

No change 0.00 pp

From 11.31% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedoslinuxVerified
MySQL 5.0.x - IF Query Handling Remote Denial of Service
Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: network-reachable, authentication (CVSS vector). Other conditions: not stated in public data.

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

Debian1 product

debian_linuxEOL3.1 | 4.0

Oracle1 product

mysql< 5.0.40 | ≥ 5.1, ≤ 5.1.17

3 vendors · 3 products

References

26 links

www.vupen.com/english/advisories/2007/1731VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/27823Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/25196Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/25188Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1356X Refsource CONFIRMBroken Link
secunia.com/advisories/25389Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.trustix.org/errata/2007/0017/Vendor AdvisoryX Refsource TRUSTIXBroken Link
exchange.xforce.ibmcloud.com/vulnerabilities/34232VDB EntryX Refsource XFThird Party Advisory
security.gentoo.org/glsa/glsa-200705-11.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
bugs.mysql.com/bug.php?id=27513X Refsource CONFIRMIssue TrackingVendor Advisory

Show all 26 references

www.exploit-db.com/exploits/30020ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
secunia.com/advisories/25946Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/23911VDB EntryX Refsource BIDThird Party AdvisoryVendor Advisory
www.debian.org/security/2007/dsa-1413Vendor AdvisoryX Refsource DEBIANPatchThird Party Advisory
lists.mysql.com/commits/23685X Refsource CONFIRMVendor Advisory
usn.ubuntu.com/528-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:139Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9930VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/30351Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/27155Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.osvdb.org/34734VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/25255Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28838Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2008-0364.htmlVendor AdvisoryX Refsource REDHAT
packetstormsecurity.com/files/124295/MySQL-5.0.x-Denial-Of-Service.htmlX Refsource MISCThird Party AdvisoryVDB Entry