• Anushree Prakash B's avatar
    Bug#26372491 - RCE THROUGH THE MISHANDLE OF BACKSLASH · 43632f4c
    Anushree Prakash B authored
    DESCRIPTION:
    ===========
    The bug is related to incorrect parsing of SQL queries
    when typed in on the CLI. The incorrect parsing can
    result in unexpected results.
    
    ANALYSIS:
    ========
    The scenarios mainly happens for identifier names
    with a typical combination of backslashes and backticks.
    The incorrect parsing can either result in executing
    additional queries or can result in query truncation.
    This can impact mysqldump as well.
    
    FIX:
    ===
    The fix makes sure that such identifier names are
    correctly parsed and a proper query is sent to the
    server for execution.
    43632f4c
mysql.cc 143 KB