CVE-2016-1246

CVE-2016-1246 : Buffer overflow in the Perl DBD::mysql module prior to 4.037 allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message. Affected: DBD::mysql (Perl). Root cause: buffer overflow in the module before 4.037. Impact: denial of serv...

CVE-2017-10788

CVE-2017-10788 affects the DBD::mysql Perl module (up to at least 4.043). A remote attacker can trigger a use-after-free condition or cause an application crash by exploiting certain error responses from MySQL or a lost network connection. The use-after-free defect was introduced by incorrect Ora...

CVE-2017-10789

CVE-2017-10789 concerns the DBD::mysql Perl module (versions up to 4.043) where mysql_ssl=1 is treated as enabling SSL only optionally, despite documentation implying encrypted communication. This allows MITM attackers to downgrade to a cleartext connection and spoof the MySQL server (related to ...

CVE-2016-1249

CVE-2016-1249 affects the DBD::mysql Perl module prior to 4.039 when using server-side prepared statements, enabling a potential denial of service via an out-of-bounds read caused by an unaligned number of placeholders in WHERE conditions and in SELECT output fields. The issue is in libdbd-mysql-...

CVE-2015-8949

CVE-2015-8949 is a use-after-free vulnerability in the MySQL driver for Perl (DBD::mysql) affecting versions before 4.033_01, triggered by a faulty path in the my_login flow that allows an unspecified impact. The issue is noted in multiple advisories and CVE lists, with references across NVD, Gen...

CVE-2014-9906

CVE-2014-9906 describes a use-after-free vulnerability in the Perl DBD::mysql module prior to version 4.029. The issue arises from improper memory handling, allowing a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via vectors related to a lost server ...

CVE-2016-1251

CVE-2016-1251 – DBD::mysql use-after-free affects the Perl DBI driver for MySQL (libdbd-mysql-perl) in versions 3.x and 4.x prior to 4.041 when mysql_server_prepare=1 is used. Root cause is a use-after-free in memory handling related to prepared statements, as detailed in the vulnerability descri...