CVE-2006-7232: Canonical Ubuntu Linux

Low severity, CVSS 3.5. EPSS: 2% chance of exploitation in the next 30 days.

sql_select.cc in MySQL 5.0.x before 5.0.32 and 5.1.x before 5.1.14 allows remote authenticated users to cause a denial of service (crash) via an EXPLAIN SELECT FROM on the INFORMATION_SCHEMA table, as originally demonstrated using ORDER BY.

Affected products

• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only; version 7.10 only
• MySQL MySQL: from 5.0, before 5.0.32 (fixed in 5.0.32); from 5.1, before 5.1.14 (fixed in 5.1.14)

Published 2006-12-31. Last modified 2026-06-16.