Description
Oracle MySQL 5.1.67 and earlier and 5.5.29 and earlier, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (mysqld crash) via a SELECT command with an UpdateXML command containing XML with a large number of unique, nested elements.
Remediation
References
Related Vulnerabilities
CrushFTP Server Improper Validation of Integrity Check Value Vulnerability (CVE-2023-48795)
Ruby Improper Input Validation Vulnerability (CVE-2015-1855)
Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-1468)
WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.68)