PT-2016-4671 · Mysql Server+3 · Dbd::Mysql+3

Salvatore Bonaccorso · Published 2016-11-29 · Updated 2025-04-07 · CVE-2016-1251

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DBD::mysql versions 3.x and 4.x before 4.041

Description The issue is related to a use-after-free vulnerability. It affects the DBD::mysql driver when used with the option mysql server prepare=1.

Recommendations For DBD::mysql versions 3.x and 4.x before 4.041, update to version 4.041 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2016-2374

CVE-2016-1251

MGASA-2018-0031

OPENSUSE-SU-2024:10186-1

SUSE-SU-2017:0025-1

SUSE-SU-2017:0123-1

SUSE-SU-2017_0025-1

USN-5344-1

USN-7417-1

Affected Products

Alt Linux

Dbd::Mysql

Suse

Ubuntu

References · 39

• https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-1251 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-1251 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/NY3AHSF4ZPQQ5OGYZYNQOD7TBL7CAG4F · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10186-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-1251 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2017:0123-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/7BLHU5FAHMKZBZ4LAHIASWUJVK4O6JS6 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7417-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5344-1 · Vendor Advisory
• https://debian.org/security/2016/dsa-3684 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2018-0031.html · Security Note
• https://ubuntu.com/security/notices/USN-7417-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-10788 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2018-0031 · Vendor Advisory