Read the docs
TI-2016-01148 Aliases CVE-2016-1251GHSA-rcfm-gwhc-4xf6

Use after free in DBD::mysql before 4.041

Priority MEDIUM 41CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Will not fix Red Hat: no fix planned

Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.

Summary

There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.

Why it matters now

EPSS 0.03118 87th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—DBD::mysql before 4.041DBD::mysql before 4.041—No fix listedCNA
  • DBD::mysql before 4.041 Vendor— Affected DBD::mysql before 4.041 Fixed in — No fix listed CNA

CPE configurations NVD · 69

CPEVersionsRoleVendor
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:*3.0000_0VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:*3.0001_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:*3.0001_2VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:*3.0001_3VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:*3.0002_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:*3.0002_2VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:*3.0002_3VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:*3.0002_4VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:*3.0002_5VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:*3.0003_1VulnerableDbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:* Versions 3.0000_0 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:* Versions 3.0001_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:* Versions 3.0001_2 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:* Versions 3.0001_3 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:* Versions 3.0002_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:* Versions 3.0002_2 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:* Versions 3.0002_3 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:* Versions 3.0002_4 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:* Versions 3.0002_5 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:* Versions 3.0003_1 Vulnerable ·Dbd-mysql Project
Show 59 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:*3.0004_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:*3.0005VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:*3.0005_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:*3.0007_2VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:*3.0008_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:*3.0009_1VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:*4.00VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:*4.001VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:*4.002VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:*4.003VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:*4.004VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:*4.005VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:*4.006VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:*4.007VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:*4.008VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:*4.009VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:*4.010VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:*4.011VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:*4.012VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:*4.013VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:*4.014VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:*4.015VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:*4.016VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:*4.017VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:*4.018VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:*4.019VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:*4.020VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:*4.021VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:*4.022VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:*4.023VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:*4.024VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:*4.025VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:*4.026VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:*4.027VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:*4.028VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:*4.029VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:*4.030_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:*4.030_02VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:*4.031VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:*4.032VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:*4.032_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:*4.032_02VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:*4.032_03VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:*4.033VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:*4.033_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:*4.033_02VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:*4.033_03VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:*4.034VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:*4.035VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:*4.035_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:*4.035_02VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:*4.035_03VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:*4.036VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:*4.037VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:*4.037_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:*4.038VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:*4.038_01VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:*4.039VulnerableDbd-mysql Project
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:*4.040VulnerableDbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:* Versions 3.0004_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:* Versions 3.0005 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:* Versions 3.0005_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:* Versions 3.0007_2 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:* Versions 3.0008_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:* Versions 3.0009_1 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:* Versions 4.00 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:* Versions 4.001 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:* Versions 4.002 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:* Versions 4.003 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:* Versions 4.004 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:* Versions 4.005 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:* Versions 4.006 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:* Versions 4.007 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:* Versions 4.008 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:* Versions 4.009 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:* Versions 4.010 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:* Versions 4.011 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:* Versions 4.012 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:* Versions 4.013 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:* Versions 4.014 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:* Versions 4.015 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:* Versions 4.016 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:* Versions 4.017 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:* Versions 4.018 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:* Versions 4.019 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:* Versions 4.020 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:* Versions 4.021 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:* Versions 4.022 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:* Versions 4.023 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:* Versions 4.024 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:* Versions 4.025 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:* Versions 4.026 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:* Versions 4.027 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:* Versions 4.028 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:* Versions 4.029 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:* Versions 4.030_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:* Versions 4.030_02 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:* Versions 4.031 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:* Versions 4.032 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:* Versions 4.032_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:* Versions 4.032_02 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:* Versions 4.032_03 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:* Versions 4.033 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:* Versions 4.033_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:* Versions 4.033_02 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:* Versions 4.033_03 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:* Versions 4.034 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:* Versions 4.035 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:* Versions 4.035_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:* Versions 4.035_02 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:* Versions 4.035_03 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:* Versions 4.036 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:* Versions 4.037 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:* Versions 4.037_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:* Versions 4.038 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:* Versions 4.038_01 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:* Versions 4.039 Vulnerable ·Dbd-mysql Project
  • cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:* Versions 4.040 Vulnerable ·Dbd-mysql Project

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 5AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Will not fix
Red Hat Software CollectionsAffectedNo fix planned: Will not fix

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-1251
  2. 2026-10-03 Alias added: GHSA-rcfm-gwhc-4xf6

References

  • TI-2014-08072 Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a… CVSS 3.0CRITICAL 9.8
  • TI-2017-07893 The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of… CVSS 3.0CRITICAL 9.8
  • TI-2015-07362 Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01… CVSS 3.0CRITICAL 9.8
  • TI-2016-01144 Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent… CVSS 3.0HIGH 7.5
  • TI-2017-07894 The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that… CVSS 3.0MEDIUM 5.9
  • TI-2016-01147 The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement… CVSS 3.0MEDIUM 5.9

Sources