CVE-2014-9906: Use After Free
Published Aug 19, 2016
·Updated
Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.
Affected Software
2 affected components
Debian Debian Linux=8.0
Dbd-mysql Project Dbd-mysql<=4.028
Remediation
Event History
Aug 19, 2016
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9906?
CVE-2014-9906 has a severity rating that allows for denial of service and potentially arbitrary code execution.
2
What versions of DBD::mysql are affected by CVE-2014-9906?
CVE-2014-9906 affects versions of DBD::mysql up to and including 4.028.
3
How do I fix CVE-2014-9906?
To fix CVE-2014-9906, upgrade to DBD::mysql version 4.029 or later.
4
Can CVE-2014-9906 lead to remote code execution?
Yes, CVE-2014-9906 can potentially be exploited to execute arbitrary code due to the use-after-free vulnerability.
5
What platforms are impacted by CVE-2014-9906?
CVE-2014-9906 impacts Debian Linux 8.0 and vulnerable versions of DBD::mysql.