PT-2016-4671 · Mysql Server+3 · Dbd::Mysql+3

Salvatore Bonaccorso · CVE-2016-1251 · Publicado 2016-11-29 · Atualizado 2025-04-07

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DBD::mysql versions 3.x and 4.x before 4.041

Description The issue is related to a use-after-free vulnerability. It affects the DBD::mysql driver when used with the option mysql server prepare=1.

Recommendations For DBD::mysql versions 3.x and 4.x before 4.041, update to version 4.041 or later to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2016-2374

CVE-2016-1251

MGASA-2018-0031

OPENSUSE-SU-2024:10186-1

SUSE-SU-2017:0025-1

SUSE-SU-2017:0123-1

SUSE-SU-2017_0025-1

USN-5344-1

USN-7417-1

Produtos afetados

Alt Linux

Dbd::Mysql

Suse

Ubuntu

Referências · 39

• https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1 · Correção
• https://bugzilla.suse.com/1002626 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1251 · Aviso do Fabricante
• https://tracker.debian.org/news/819888 · Nota
• https://cve.org/CVERecord?id=CVE-2016-1251 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NY3AHSF4ZPQQ5OGYZYNQOD7TBL7CAG4F · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:10186-1 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-1251 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2017:0123-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1012546 · Nota
• https://bugzilla.suse.com/1010457 · Nota
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/7BLHU5FAHMKZBZ4LAHIASWUJVK4O6JS6 · Aviso do Fabricante
• https://suse.com/support/update/announcement/2017/suse-su-20170123-1 · Nota
• https://osv.dev/vulnerability/USN-7417-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-5344-1 · Aviso do Fabricante