CVE-2009-4019

CVE-2009-4019 describes a denial-of-service vulnerability affecting MySQL versions 5.0.x before 5.0.88 and 5.1.x before 5.1.41. The vulnerability stems from improper error handling during SELECT statements with subqueries and a failure to preserve null_value flags with the GeomFromWKB function, allowing authenticated remote attackers to crash the daemon. With a CVSS score of 4.0, this vulnerability has a low attack complexity and requires authentication, leading to a partial availability impact. While not listed on the KEV catalog or Hot List, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.