CVE-2010-2008: MySQL before 5.1.48 allows remote authenticated users with alter database privileges to cause a denial of s...

Security readout for executives and security teams

This flaw affects MySQL before 5.1.48. A logged-in user with database-alteration privileges could crash the server and potentially cause database loss through malformed database directory handling. It is not a general unauthenticated internet attack, but it matters where database privileges are broadly delegated or shared. Exposure is most likely in legacy MySQL deployments below 5.1.48, especially where non-admin application, tenant, or support accounts hold ALTER DATABASE privileges. Current systems using vendor-supported MySQL packages are less likely exposed, but old appliances and unmanaged databases need inventory checks. Treat this as a targeted legacy-database risk, not an emergency internet-wide issue. Prioritize remediation where old MySQL systems support critical applications or allow broad database administration privileges. Mitigation focus: Upgrade MySQL to 5.1.48 or a vendor-supported patched package.; Apply relevant distribution security updates from Ubuntu, Fedora, Mandriva, or your vendor.; Restrict ALTER DATABASE privileges to trusted database administrators only..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.