CVE-2003-0073: Oracle MySQL

Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days.

Double-free vulnerability in mysqld for MySQL before 3.23.55 allows attackers with MySQL access to cause a denial of service (crash) via mysql_change_user.

Affected products

• Oracle MySQL: version 3.23.31 only; version 3.23.36 only; version 3.23.41 only; version 3.23.47 only; version 3.23.52 only; version 3.23.53 only; …

Published 2003-02-19. Last modified 2026-06-16.