CVE-2006-3081: MySQL

Medium severity, CVSS 4.0. EPSS: 25.8% chance of exploitation in the next 30 days.

mysqld in MySQL 4.1.x before 4.1.18, 5.0.x before 5.0.19, and 5.1.x before 5.1.6 allows remote authorized users to cause a denial of service (crash) via a NULL second argument to the str_to_date function.

Affected products

• MySQL MySQL: version 4.1.13 only; version 4.1.15 only; version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.0.3 only; …
• Oracle MySQL: version 4.0.18 only; version 4.1.4 only; version 4.1.5 only; version 4.1.7 only; version 4.1.16 only; version 5.0.18 only

Published 2006-06-19. Last modified 2026-06-16.