CVE-2004-2149: Oracle MySQL

Medium severity, CVSS 5.0. EPSS: 5.6% chance of exploitation in the next 30 days.

Buffer overflow in the prepared statements API in libmysqlclient for MySQL 4.1.3 beta and 4.1.4 allows remote attackers to cause a denial of service via a large number of placeholders.

Affected products

• Oracle MySQL: version 4.1.3 only; version 4.1.4 only

Published 2004-12-31. Last modified 2026-06-16.