PT-2016-3226 · Perl+3 · Dbd::Mysql+3
Paul Rohar
·
Publicado
2016-10-02
·
Atualizado
2024-12-11
·
CVE-2016-1246
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
DBD::mysql versions prior to 4.037
Description
The issue is caused by a buffer overflow in the DBD::mysql module for Perl Database Interface (DBI), which can be exploited by a remote attacker to cause a denial of service (crash) via vectors related to an error message, potentially leading to a service disruption.
Recommendations
For DBD::mysql versions prior to 4.037, update to version 4.037 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DBD::mysql module to minimize the risk of exploitation.
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Dbd::Mysql
Apple Macos
Suse
Ubuntu