An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.

...

DBD::mysql content misreference vulnerability

DBD::mysql is a Perl5 Database Interface DBI driver for MySQL. A content misreference vulnerability exists in DBD::mysql version 3.x and version 4.x prior to 4.041. An attacker can exploit this vulnerability to execute arbitrary code...

Debian DLA-576-1 : libdbd-mysql-perl security update

Two use-after-free vulnerabilities were discovered in DBD::mysql, a Perl DBI driver for the MySQL database server. A remote attacker can take advantage of these flaws to cause a denial of service against an application using DBD::mysql application crash, or potentially to execute arbitrary code...