Use after free in DBD::mysql before 4.041
Priority MEDIUM 41CWE-416Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Will not fix Red Hat: no fix planned
Attack profile from CVSS 3.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-416 and the CVSS impact.
Summary
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
Why it matters now
EPSS 0.03118 87th percentileScored 2026-11-07
Fix Will not fix Red Hat: no fix planned
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | DBD::mysql before 4.041 | DBD::mysql before 4.041 | — | No fix listed | CNA |
- DBD::mysql before 4.041 Vendor— Affected DBD::mysql before 4.041 Fixed in — No fix listed CNA
CPE configurations NVD · 69
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:* | 3.0000_0 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:* | 3.0001_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:* | 3.0001_2 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:* | 3.0001_3 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:* | 3.0002_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:* | 3.0002_2 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:* | 3.0002_3 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:* | 3.0002_4 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:* | 3.0002_5 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:* | 3.0003_1 | Vulnerable | Dbd-mysql Project |
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:* Versions 3.0000_0 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:* Versions 3.0001_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:* Versions 3.0001_2 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:* Versions 3.0001_3 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:* Versions 3.0002_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:* Versions 3.0002_2 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:* Versions 3.0002_3 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:* Versions 3.0002_4 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:* Versions 3.0002_5 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:* Versions 3.0003_1 Vulnerable ·Dbd-mysql Project
Show 59 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:* | 3.0004_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:* | 3.0005 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:* | 3.0005_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:* | 3.0007_2 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:* | 3.0008_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:* | 3.0009_1 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:* | 4.00 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:* | 4.001 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:* | 4.002 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:* | 4.003 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:* | 4.004 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:* | 4.005 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:* | 4.006 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:* | 4.007 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:* | 4.008 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:* | 4.009 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:* | 4.010 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:* | 4.011 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:* | 4.012 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:* | 4.013 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:* | 4.014 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:* | 4.015 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:* | 4.016 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:* | 4.017 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:* | 4.018 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:* | 4.019 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:* | 4.020 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:* | 4.021 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:* | 4.022 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:* | 4.023 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:* | 4.024 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:* | 4.025 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:* | 4.026 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:* | 4.027 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:* | 4.028 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:* | 4.029 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:* | 4.030_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:* | 4.030_02 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:* | 4.031 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:* | 4.032 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:* | 4.032_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:* | 4.032_02 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:* | 4.032_03 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:* | 4.033 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:* | 4.033_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:* | 4.033_02 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:* | 4.033_03 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:* | 4.034 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:* | 4.035 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:* | 4.035_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:* | 4.035_02 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:* | 4.035_03 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:* | 4.036 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:* | 4.037 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:* | 4.037_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:* | 4.038 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:* | 4.038_01 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:* | 4.039 | Vulnerable | Dbd-mysql Project |
| cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:* | 4.040 | Vulnerable | Dbd-mysql Project |
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:* Versions 3.0004_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:* Versions 3.0005 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:* Versions 3.0005_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:* Versions 3.0007_2 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:* Versions 3.0008_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:* Versions 3.0009_1 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:* Versions 4.00 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:* Versions 4.001 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:* Versions 4.002 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:* Versions 4.003 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:* Versions 4.004 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:* Versions 4.005 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:* Versions 4.006 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:* Versions 4.007 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:* Versions 4.008 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:* Versions 4.009 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:* Versions 4.010 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:* Versions 4.011 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:* Versions 4.012 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:* Versions 4.013 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:* Versions 4.014 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:* Versions 4.015 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:* Versions 4.016 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:* Versions 4.017 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:* Versions 4.018 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:* Versions 4.019 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:* Versions 4.020 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:* Versions 4.021 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:* Versions 4.022 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:* Versions 4.023 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:* Versions 4.024 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:* Versions 4.025 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:* Versions 4.026 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:* Versions 4.027 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:* Versions 4.028 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:* Versions 4.029 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:* Versions 4.030_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:* Versions 4.030_02 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:* Versions 4.031 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:* Versions 4.032 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:* Versions 4.032_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:* Versions 4.032_02 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:* Versions 4.032_03 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:* Versions 4.033 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:* Versions 4.033_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:* Versions 4.033_02 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:* Versions 4.033_03 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:* Versions 4.034 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:* Versions 4.035 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:* Versions 4.035_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:* Versions 4.035_02 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:* Versions 4.035_03 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:* Versions 4.036 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:* Versions 4.037 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:* Versions 4.037_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:* Versions 4.038 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:* Versions 4.038_01 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:* Versions 4.039 Vulnerable ·Dbd-mysql Project
- cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:* Versions 4.040 Vulnerable ·Dbd-mysql Project
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 5 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat Software Collections | Affected | No fix planned: Will not fix |
Timeline
- 2026-10-02 Threatist record created from CVE-2016-1251
- 2026-10-03 Alias added: GHSA-rcfm-gwhc-4xf6
References
Patch 2
More Dbd-mysql Project Dbd-mysql vulnerabilities
- TI-2014-08072 Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a… CVSS 3.0CRITICAL 9.8
- TI-2017-07893 The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of… CVSS 3.0CRITICAL 9.8
- TI-2015-07362 Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01… CVSS 3.0CRITICAL 9.8
- TI-2016-01144 Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent… CVSS 3.0HIGH 7.5
- TI-2017-07894 The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that… CVSS 3.0MEDIUM 5.9
- TI-2016-01147 The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement… CVSS 3.0MEDIUM 5.9
Sources
- CVE-2016-1251 · CVE Program
- CVE-2016-1251 · NVD
- FIRST EPSS
- GHSA-rcfm-gwhc-4xf6 · GitHub Advisory Database · CC BY 4.0
- CVE-2016-1251 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences