MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mysql | Mysql | 4.1.0 (including) | 4.1.0 (including) |
| Mysql | Oracle | 3.20 (including) | 3.23.49 (excluding) |
| Mysql | Oracle | 4.0.0 (including) | 4.0.21 (excluding) |