CVE:CVE-2013-1861
CNNVD:CNNVD-201303-350
MariaDB是美国Monty Program Ab公司和美国MariaDB基金会共同开发的一套免费开源的数据库管理系统，也是一个采用Maria存储引擎的MySQL分支版本。
Oracle MySQL中的MariaDB 5.5.30之前的5.5.x版本，5.3.13之前的5.3.x版本，5.2.15之前的5.2.x版本，5.1.68之前的5.1.x版本中存在漏洞，该漏洞源于程序没有正确地处理几何功能的二进制表示（与数值计算错误有关）。通过可指定大量的点的特制几何功能，远程攻击者利用该漏洞导致拒绝服务（崩溃）。
solution:Upgrade mariadb mariadb to a higher version than 5.5.32,10.0.4,and avoid the version [5.5.0,5.5.32),[10.0.0,10.0.4); Upgrade oracle mysql to a higher version than 5.1.69,5.5.31,5.6.11,and avoid the version [5.1.0,5.1.69],[5.5.0,5.5.31],[5.6.0,5.6.11]; Upgrade redhat enterprise_linux to a higher version than 5,6.0,and avoid the version 5,6.0; Upgrade debian debian_linux to a higher version than 7.0,and avoid the version 7.0; Upgrade canonical ubuntu_linux to a higher version than 10.04,12.04,12.10,13.04,and avoid the version 10.04,12.04,12.10,13.04; Upgrade opensuse opensuse to a higher version than 11.4,12.2,12.3,and avoid the version 11.4,12.2,12.3; Upgrade suse linux_enterprise_desktop to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_server to a higher version than 11:sp3,and avoid the version 11:sp3; Upgrade suse linux_enterprise_software_development_kit to a higher version than 11:sp3,and avoid the version 11:sp3