CVE-2016-1251: Use After Free
Published Nov 29, 2016
·Updated
Last updated 7 April 2025
Other sources
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysqlserverprepare=1.
— MITRE
Affected Software
70 affected componentsFixes available
Dbd-mysql Project Dbd-mysql=3.0000_0
Dbd-mysql Project Dbd-mysql=3.0001_1
Dbd-mysql Project Dbd-mysql=3.0001_2
Dbd-mysql Project Dbd-mysql=3.0001_3
Dbd-mysql Project Dbd-mysql=3.0002_1
Dbd-mysql Project Dbd-mysql=3.0002_2
Dbd-mysql Project Dbd-mysql=3.0002_3
Dbd-mysql Project Dbd-mysql=3.0002_4
Dbd-mysql Project Dbd-mysql=3.0002_5
Dbd-mysql Project Dbd-mysql=3.0003_1
Dbd-mysql Project Dbd-mysql=3.0004_1
Dbd-mysql Project Dbd-mysql=3.0005
Dbd-mysql Project Dbd-mysql=3.0005_1
Dbd-mysql Project Dbd-mysql=3.0007_2
Dbd-mysql Project Dbd-mysql=3.0008_1
Dbd-mysql Project Dbd-mysql=3.0009_1
Dbd-mysql Project Dbd-mysql=4.00
Dbd-mysql Project Dbd-mysql=4.001
Dbd-mysql Project Dbd-mysql=4.002
Dbd-mysql Project Dbd-mysql=4.003
Dbd-mysql Project Dbd-mysql=4.004
Dbd-mysql Project Dbd-mysql=4.005
Dbd-mysql Project Dbd-mysql=4.006
Dbd-mysql Project Dbd-mysql=4.007
Dbd-mysql Project Dbd-mysql=4.008
Dbd-mysql Project Dbd-mysql=4.009
Dbd-mysql Project Dbd-mysql=4.010
Dbd-mysql Project Dbd-mysql=4.011
Dbd-mysql Project Dbd-mysql=4.012
Dbd-mysql Project Dbd-mysql=4.013
Dbd-mysql Project Dbd-mysql=4.014
Dbd-mysql Project Dbd-mysql=4.015
Dbd-mysql Project Dbd-mysql=4.016
Dbd-mysql Project Dbd-mysql=4.017
Dbd-mysql Project Dbd-mysql=4.018
Dbd-mysql Project Dbd-mysql=4.019
Dbd-mysql Project Dbd-mysql=4.020
Dbd-mysql Project Dbd-mysql=4.021
Dbd-mysql Project Dbd-mysql=4.022
Dbd-mysql Project Dbd-mysql=4.023
Dbd-mysql Project Dbd-mysql=4.024
Dbd-mysql Project Dbd-mysql=4.025
Dbd-mysql Project Dbd-mysql=4.026
Dbd-mysql Project Dbd-mysql=4.027
Dbd-mysql Project Dbd-mysql=4.028
Dbd-mysql Project Dbd-mysql=4.029
Dbd-mysql Project Dbd-mysql=4.030_01
Dbd-mysql Project Dbd-mysql=4.030_02
Dbd-mysql Project Dbd-mysql=4.031
Dbd-mysql Project Dbd-mysql=4.032
Dbd-mysql Project Dbd-mysql=4.032_01
Dbd-mysql Project Dbd-mysql=4.032_02
Dbd-mysql Project Dbd-mysql=4.032_03
Dbd-mysql Project Dbd-mysql=4.033
Dbd-mysql Project Dbd-mysql=4.033_01
Dbd-mysql Project Dbd-mysql=4.033_02
Dbd-mysql Project Dbd-mysql=4.033_03
Dbd-mysql Project Dbd-mysql=4.034
Dbd-mysql Project Dbd-mysql=4.035
Dbd-mysql Project Dbd-mysql=4.035_01
Dbd-mysql Project Dbd-mysql=4.035_02
Dbd-mysql Project Dbd-mysql=4.035_03
Dbd-mysql Project Dbd-mysql=4.036
Dbd-mysql Project Dbd-mysql=4.037
Dbd-mysql Project Dbd-mysql=4.037_01
Dbd-mysql Project Dbd-mysql=4.038
Dbd-mysql Project Dbd-mysql=4.038_01
Dbd-mysql Project Dbd-mysql=4.039
Dbd-mysql Project Dbd-mysql=4.040
debian/libdbd-mysql-perl
4.050-34.050-54.053-1
Remediation
Event History
Nov 29, 2016
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Apr 11, 2025
Data Sourced
via Ubuntu·03:36 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·03:37 AM
Description
Data Sourced
via Debian·03:37 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-1251?
CVE-2016-1251 is classified as a medium severity vulnerability due to its potential for exploitation via a use-after-free error.
2
How do I fix CVE-2016-1251?
To fix CVE-2016-1251, upgrade DBD::mysql to version 4.041 or later, which addresses the vulnerability.
3
What is affected by CVE-2016-1251?
CVE-2016-1251 affects DBD::mysql versions 3.x and 4.x before 4.041.
4
What type of vulnerability is CVE-2016-1251?
CVE-2016-1251 is a use-after-free vulnerability affecting the DBD::mysql Perl driver.
5
Can CVE-2016-1251 lead to remote code execution?
Yes, the use-after-free vulnerability in CVE-2016-1251 may lead to remote code execution if exploited.