CVE-2002-1373: Oracle MySQL

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Signed integer vulnerability in the COM_TABLE_DUMP package for MySQL 3.23.x before 3.23.54 allows remote attackers to cause a denial of service (crash or hang) in mysqld by causing large negative integers to be provided to a memcpy call.

Affected products

• Oracle MySQL: version 3.22.26 only; version 3.22.27 only; version 3.22.28 only; version 3.22.29 only; version 3.22.30 only; version 3.22.32 only; …

Published 2002-12-23. Last modified 2026-06-16.