CVE-2016-1251: Use After Free
First published: Tue Nov 29 2016(Updated: )
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
Credit: security@debian.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CPAN DBD::mysql | =3.0000_0 | |
| CPAN DBD::mysql | =3.0001_1 | |
| CPAN DBD::mysql | =3.0001_2 | |
| CPAN DBD::mysql | =3.0001_3 | |
| CPAN DBD::mysql | =3.0002_1 | |
| CPAN DBD::mysql | =3.0002_2 | |
| CPAN DBD::mysql | =3.0002_3 | |
| CPAN DBD::mysql | =3.0002_4 | |
| CPAN DBD::mysql | =3.0002_5 | |
| CPAN DBD::mysql | =3.0003_1 | |
| CPAN DBD::mysql | =3.0004_1 | |
| CPAN DBD::mysql | =3.0005 | |
| CPAN DBD::mysql | =3.0005_1 | |
| CPAN DBD::mysql | =3.0007_2 | |
| CPAN DBD::mysql | =3.0008_1 | |
| CPAN DBD::mysql | =3.0009_1 | |
| CPAN DBD::mysql | =4.00 | |
| CPAN DBD::mysql | =4.001 | |
| CPAN DBD::mysql | =4.002 | |
| CPAN DBD::mysql | =4.003 | |
| CPAN DBD::mysql | =4.004 | |
| CPAN DBD::mysql | =4.005 | |
| CPAN DBD::mysql | =4.006 | |
| CPAN DBD::mysql | =4.007 | |
| CPAN DBD::mysql | =4.008 | |
| CPAN DBD::mysql | =4.009 | |
| CPAN DBD::mysql | =4.010 | |
| CPAN DBD::mysql | =4.011 | |
| CPAN DBD::mysql | =4.012 | |
| CPAN DBD::mysql | =4.013 | |
| CPAN DBD::mysql | =4.014 | |
| CPAN DBD::mysql | =4.015 | |
| CPAN DBD::mysql | =4.016 | |
| CPAN DBD::mysql | =4.017 | |
| CPAN DBD::mysql | =4.018 | |
| CPAN DBD::mysql | =4.019 | |
| CPAN DBD::mysql | =4.020 | |
| CPAN DBD::mysql | =4.021 | |
| CPAN DBD::mysql | =4.022 | |
| CPAN DBD::mysql | =4.023 | |
| CPAN DBD::mysql | =4.024 | |
| CPAN DBD::mysql | =4.025 | |
| CPAN DBD::mysql | =4.026 | |
| CPAN DBD::mysql | =4.027 | |
| CPAN DBD::mysql | =4.028 | |
| CPAN DBD::mysql | =4.029 | |
| CPAN DBD::mysql | =4.030_01 | |
| CPAN DBD::mysql | =4.030_02 | |
| CPAN DBD::mysql | =4.031 | |
| CPAN DBD::mysql | =4.032 | |
| CPAN DBD::mysql | =4.032_01 | |
| CPAN DBD::mysql | =4.032_02 | |
| CPAN DBD::mysql | =4.032_03 | |
| CPAN DBD::mysql | =4.033 | |
| CPAN DBD::mysql | =4.033_01 | |
| CPAN DBD::mysql | =4.033_02 | |
| CPAN DBD::mysql | =4.033_03 | |
| CPAN DBD::mysql | =4.034 | |
| CPAN DBD::mysql | =4.035 | |
| CPAN DBD::mysql | =4.035_01 | |
| CPAN DBD::mysql | =4.035_02 | |
| CPAN DBD::mysql | =4.035_03 | |
| CPAN DBD::mysql | =4.036 | |
| CPAN DBD::mysql | =4.037 | |
| CPAN DBD::mysql | =4.037_01 | |
| CPAN DBD::mysql | =4.038 | |
| CPAN DBD::mysql | =4.038_01 | |
| CPAN DBD::mysql | =4.039 | |
| CPAN DBD::mysql | =4.040 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.openwall.com/lists/oss-security/2016/11/28/2
- http://www.securityfocus.com/bid/94573
- https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1
- https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1
- https://security.gentoo.org/glsa/201701-51
- https://tracker.debian.org/news/819888
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/dbd-mysql project
- canonical/cpan dbd::mysql
- version/cpan dbd::mysql/3.0000_0
- version/cpan dbd::mysql/3.0001_1
- version/cpan dbd::mysql/3.0001_2
- version/cpan dbd::mysql/3.0001_3
- version/cpan dbd::mysql/3.0002_1
- version/cpan dbd::mysql/3.0002_2
- version/cpan dbd::mysql/3.0002_3
- version/cpan dbd::mysql/3.0002_4
- version/cpan dbd::mysql/3.0002_5
- version/cpan dbd::mysql/3.0003_1
- version/cpan dbd::mysql/3.0004_1
- version/cpan dbd::mysql/3.0005
- version/cpan dbd::mysql/3.0005_1
- version/cpan dbd::mysql/3.0007_2
- version/cpan dbd::mysql/3.0008_1
- version/cpan dbd::mysql/3.0009_1
- version/cpan dbd::mysql/4.00
- version/cpan dbd::mysql/4.001
- version/cpan dbd::mysql/4.002
- version/cpan dbd::mysql/4.003
- version/cpan dbd::mysql/4.004
- version/cpan dbd::mysql/4.005
- version/cpan dbd::mysql/4.006
- version/cpan dbd::mysql/4.007
- version/cpan dbd::mysql/4.008
- version/cpan dbd::mysql/4.009
- version/cpan dbd::mysql/4.010
- version/cpan dbd::mysql/4.011
- version/cpan dbd::mysql/4.012
- version/cpan dbd::mysql/4.013
- version/cpan dbd::mysql/4.014
- version/cpan dbd::mysql/4.015
- version/cpan dbd::mysql/4.016
- version/cpan dbd::mysql/4.017
- version/cpan dbd::mysql/4.018
- version/cpan dbd::mysql/4.019
- version/cpan dbd::mysql/4.020
- version/cpan dbd::mysql/4.021
- version/cpan dbd::mysql/4.022
- version/cpan dbd::mysql/4.023
- version/cpan dbd::mysql/4.024
- version/cpan dbd::mysql/4.025
- version/cpan dbd::mysql/4.026
- version/cpan dbd::mysql/4.027
- version/cpan dbd::mysql/4.028
- version/cpan dbd::mysql/4.029
- version/cpan dbd::mysql/4.030_01
- version/cpan dbd::mysql/4.030_02
- version/cpan dbd::mysql/4.031
- version/cpan dbd::mysql/4.032
- version/cpan dbd::mysql/4.032_01
- version/cpan dbd::mysql/4.032_02
- version/cpan dbd::mysql/4.032_03
- version/cpan dbd::mysql/4.033
- version/cpan dbd::mysql/4.033_01
- version/cpan dbd::mysql/4.033_02
- version/cpan dbd::mysql/4.033_03
- version/cpan dbd::mysql/4.034
- version/cpan dbd::mysql/4.035
- version/cpan dbd::mysql/4.035_01
- version/cpan dbd::mysql/4.035_02
- version/cpan dbd::mysql/4.035_03
- version/cpan dbd::mysql/4.036
- version/cpan dbd::mysql/4.037
- version/cpan dbd::mysql/4.037_01
- version/cpan dbd::mysql/4.038
- version/cpan dbd::mysql/4.038_01
- version/cpan dbd::mysql/4.039
- version/cpan dbd::mysql/4.040