Description
The Gis_line_string::init_from_wkb function in sql/spatial.cc in MySQL 5.1 before 5.1.51 allows remote authenticated users to cause a denial of service (server crash) by calling the PolyFromWKB function with Well-Known Binary (WKB) data containing a crafted number of (1) line strings or (2) line points.
Remediation
References
Related Vulnerabilities
WordPress Plugin Meow Gallery (+ Gallery Block) Security Bypass (4.1.9)
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.2.7)
Django Resource Management Errors Vulnerability (CVE-2015-5143)
WordPress Plugin Gallery-Image and Video Gallery with Thumbnails SQL Injection (2.0.3)
WordPress Plugin Newspack Blocks Arbitrary File Upload (3.0.8)