PT-2017-2461 · Oracle+3 · Dbd::Mysql+3
Glasswalk3R
·
Publicado
2017-07-01
·
Atualizado
2025-04-07
·
CVE-2017-10788
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
DBD::mysql module versions through 4.043
Description
The issue allows remote attackers to cause a denial of service, potentially leading to an application crash, by triggering certain error responses from a MySQL server or a loss of network connection to the server. This is due to a use-after-free defect, which was introduced by incorrect documentation and code examples from Oracle mysql stmt close.
Recommendations
For DBD::mysql module versions through 4.043, consider updating to a version that addresses the use-after-free defect to prevent potential denial of service attacks. As a temporary workaround, consider implementing error handling mechanisms to mitigate the impact of error responses from the MySQL server or network connection losses.
Correção
DoS
Use After Free
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Dbd::Mysql
Suse
Ubuntu