CVE-2016-1251 There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=...
HighCVSS 8.1
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libdbd-mysql-perl(Debian:12) | < 4.041-1 | 4.041-1 |
| debian/libdbd-mysql-perl(Debian:13) | < 4.041-1 | 4.041-1 |
| debian/libdbd-mysql-perl(Debian:14) | < 4.041-1 | 4.041-1 |
| dbd-mysql project dbd-mysql | = 3.0000_0 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0001_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0001_2 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0001_3 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0002_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0002_2 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0002_3 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0002_4 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0002_5 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0003_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0004_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0005 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0005_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0007_2 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0008_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 3.0009_1 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.00 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.001 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.002 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.003 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.004 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.005 | No fix listed |
Show 47 more
| Product | Affected versions | Fixed in |
|---|---|---|
| dbd-mysql project dbd-mysql | = 4.006 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.007 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.008 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.009 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.010 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.011 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.012 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.013 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.014 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.015 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.016 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.017 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.018 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.019 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.020 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.021 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.022 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.023 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.024 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.025 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.026 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.027 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.028 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.029 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.030_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.030_02 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.031 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.032 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.032_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.032_02 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.032_03 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.033 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.033_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.033_02 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.033_03 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.034 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.035 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.035_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.035_02 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.035_03 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.036 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.037 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.037_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.038 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.038_01 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.039 | No fix listed |
| dbd-mysql project dbd-mysql | = 4.040 | No fix listed |
References
- Debian Security Tracker CVE-2016-1251 vendor-advisory
- www.openwall.com mailing-list third-party-advisory
- 94573 third-party-advisory vdb-entry
- anonscm.debian.org issue-tracking patch third-party-advisory
- github.com issue-tracking patch third-party-advisory
- GLSA-201701-51 vendor-advisory
- tracker.debian.org third-party-advisory