CVE-2017-10788: Use After Free

Published Jul 1, 2017
·
Updated

Last updated 7 April 2025

Other sources

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysqlstmtclose documentation and code examples.

MITRE

Affected Software

2 affected componentsFixes available
Dbd-mysql Project Dbd-mysql<=4.043
debian/libdbd-mysql-perl
4.050-34.050-54.053-1

Event History

Jul 1, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Apr 15, 2025
Data Sourced
via Ubuntu·03:37 AM
RemedyDescriptionSeverityAffected Software
Data Sourced
via Launchpad·03:38 AM
Description

Frequently Asked Questions

1

What is the severity of CVE-2017-10788?

CVE-2017-10788 has a severity classification that indicates a denial of service risk due to use-after-free vulnerabilities.

2

How do I fix CVE-2017-10788?

To fix CVE-2017-10788, update the DBD::mysql module to version 4.044 or higher.

3

What vulnerabilities are associated with CVE-2017-10788?

CVE-2017-10788 allows for denial of service and potential application crashes due to specific MySQL server error responses.

4

Who is affected by CVE-2017-10788?

Any application using DBD::mysql versions up to 4.043 is vulnerable to CVE-2017-10788.

5

What can attackers do with CVE-2017-10788?

Attackers can exploit CVE-2017-10788 to cause application crashes or denial of service through network connection disruptions.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203