Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).
| Software | From | Fixed in |
|---|---|---|
| oracle / mysql | 3.20 | 3.23.49 |
| oracle / mysql | 4.0.0 | 4.0.21 |
| debian / debian_linux | 3.0 | 3.0.x |