Description
MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_schema table subselects and using ORDER BY to sort a single-row result, which prevents certain structure elements from being initialized and triggers a NULL dereference in the filesort function.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress renaming tool by Vlajo Arbitrary File Download (1.0)
WordPress Plugin MiniMax-Page Layout Builder Arbitrary File Upload (1.7.1)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.11)
SharePoint CVE-2021-28453 Vulnerability (CVE-2021-28453)
OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-3207)