8.1

CVE-2016-1251

There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dbd-mysql Project ≫ Dbd-mysql Version 3.0000_0
Dbd-mysql Project ≫ Dbd-mysql Version 3.0001_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0001_2
Dbd-mysql Project ≫ Dbd-mysql Version 3.0001_3
Dbd-mysql Project ≫ Dbd-mysql Version 3.0002_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0002_2
Dbd-mysql Project ≫ Dbd-mysql Version 3.0002_3
Dbd-mysql Project ≫ Dbd-mysql Version 3.0002_4
Dbd-mysql Project ≫ Dbd-mysql Version 3.0002_5
Dbd-mysql Project ≫ Dbd-mysql Version 3.0003_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0004_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0005
Dbd-mysql Project ≫ Dbd-mysql Version 3.0005_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0007_2
Dbd-mysql Project ≫ Dbd-mysql Version 3.0008_1
Dbd-mysql Project ≫ Dbd-mysql Version 3.0009_1
Dbd-mysql Project ≫ Dbd-mysql Version 4.00
Dbd-mysql Project ≫ Dbd-mysql Version 4.001
Dbd-mysql Project ≫ Dbd-mysql Version 4.002
Dbd-mysql Project ≫ Dbd-mysql Version 4.003
Dbd-mysql Project ≫ Dbd-mysql Version 4.004
Dbd-mysql Project ≫ Dbd-mysql Version 4.005
Dbd-mysql Project ≫ Dbd-mysql Version 4.006
Dbd-mysql Project ≫ Dbd-mysql Version 4.007
Dbd-mysql Project ≫ Dbd-mysql Version 4.008
Dbd-mysql Project ≫ Dbd-mysql Version 4.009
Dbd-mysql Project ≫ Dbd-mysql Version 4.010
Dbd-mysql Project ≫ Dbd-mysql Version 4.011
Dbd-mysql Project ≫ Dbd-mysql Version 4.012
Dbd-mysql Project ≫ Dbd-mysql Version 4.013
Dbd-mysql Project ≫ Dbd-mysql Version 4.014
Dbd-mysql Project ≫ Dbd-mysql Version 4.015
Dbd-mysql Project ≫ Dbd-mysql Version 4.016
Dbd-mysql Project ≫ Dbd-mysql Version 4.017
Dbd-mysql Project ≫ Dbd-mysql Version 4.018
Dbd-mysql Project ≫ Dbd-mysql Version 4.019
Dbd-mysql Project ≫ Dbd-mysql Version 4.020
Dbd-mysql Project ≫ Dbd-mysql Version 4.021
Dbd-mysql Project ≫ Dbd-mysql Version 4.022
Dbd-mysql Project ≫ Dbd-mysql Version 4.023
Dbd-mysql Project ≫ Dbd-mysql Version 4.024
Dbd-mysql Project ≫ Dbd-mysql Version 4.025
Dbd-mysql Project ≫ Dbd-mysql Version 4.026
Dbd-mysql Project ≫ Dbd-mysql Version 4.027
Dbd-mysql Project ≫ Dbd-mysql Version 4.028
Dbd-mysql Project ≫ Dbd-mysql Version 4.029
Dbd-mysql Project ≫ Dbd-mysql Version 4.030_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.030_02
Dbd-mysql Project ≫ Dbd-mysql Version 4.031
Dbd-mysql Project ≫ Dbd-mysql Version 4.032
Dbd-mysql Project ≫ Dbd-mysql Version 4.032_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.032_02
Dbd-mysql Project ≫ Dbd-mysql Version 4.032_03
Dbd-mysql Project ≫ Dbd-mysql Version 4.033
Dbd-mysql Project ≫ Dbd-mysql Version 4.033_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.033_02
Dbd-mysql Project ≫ Dbd-mysql Version 4.033_03
Dbd-mysql Project ≫ Dbd-mysql Version 4.034
Dbd-mysql Project ≫ Dbd-mysql Version 4.035
Dbd-mysql Project ≫ Dbd-mysql Version 4.035_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.035_02
Dbd-mysql Project ≫ Dbd-mysql Version 4.035_03
Dbd-mysql Project ≫ Dbd-mysql Version 4.036
Dbd-mysql Project ≫ Dbd-mysql Version 4.037
Dbd-mysql Project ≫ Dbd-mysql Version 4.037_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.038
Dbd-mysql Project ≫ Dbd-mysql Version 4.038_01
Dbd-mysql Project ≫ Dbd-mysql Version 4.039
Dbd-mysql Project ≫ Dbd-mysql Version 4.040
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.12% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.1 2.2 5.9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-416 Use After Free

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

https://security.gentoo.org/glsa/201701-51
http://www.openwall.com/lists/oss-security/2016/11/28/2
Third Party Advisory
Mailing List
http://www.securityfocus.com/bid/94573
Third Party Advisory
VDB Entry
https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1
Patch
Third Party Advisory
Issue Tracking
https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1
Patch
Third Party Advisory
Issue Tracking
https://tracker.debian.org/news/819888
Third Party Advisory