CVE-2016-1251

Severity Score

8.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.

Existe una vulnerabilidad de tipo uso después de liberación de memoria afectando a DBD::mysql (también conocido como DBD-mysql o el controlador Database Interface (DBI) MySQL para Perl) 3.x y 4.x en versiones anteriores a 4.041 cuando se usa con mysql_server_prepare=1.

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2015-12-27 CVE Reserved
2016-11-29 CVE Published
2023-03-07 EPSS Updated
2024-08-05 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-416: Use After Free

CAPEC

References (6)

URL	Tag	Source
http://www.openwall.com/lists/oss-security/2016/11/28/2	Mailing List
http://www.securityfocus.com/bid/94573	Third Party Advisory
https://tracker.debian.org/news/819888	Third Party Advisory

URL	Date	SRC

URL	Date	SRC
https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1	2017-07-01
https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1	2017-07-01

URL	Date	SRC
https://security.gentoo.org/glsa/201701-51	2017-07-01

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0000_0 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0000_0"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0001_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0001_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0001_2 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0001_2"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0001_3 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0001_3"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0002_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0002_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0002_2 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0002_2"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0002_3 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0002_3"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0002_4 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0002_4"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0002_5 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0002_5"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0003_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0003_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0004_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0004_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0005 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0005"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0005_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0005_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0007_2 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0007_2"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0008_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0008_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				3.0009_1 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "3.0009_1"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.00 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.00"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.001 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.001"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.002 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.002"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.003 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.003"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.004 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.004"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.005 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.005"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.006 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.006"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.007 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.007"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.008 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.008"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.009 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.009"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.010 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.010"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.011 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.011"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.012 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.012"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.013 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.013"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.014 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.014"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.015 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.015"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.016 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.016"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.017 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.017"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.018 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.018"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.019 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.019"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.020 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.020"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.021 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.021"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.022 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.022"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.023 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.023"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.024 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.024"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.025 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.025"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.026 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.026"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.027 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.027"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.028 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.028"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.029 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.029"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.030_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.030_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.030_02 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.030_02"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.031 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.031"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.032 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.032"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.032_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.032_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.032_02 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.032_02"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.032_03 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.032_03"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.033 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.033"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.033_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.033_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.033_02 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.033_02"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.033_03 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.033_03"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.034 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.034"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.035 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.035"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.035_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.035_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.035_02 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.035_02"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.035_03 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.035_03"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.036 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.036"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.037 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.037"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.037_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.037_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.038 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.038"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.038_01 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.038_01"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.039 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.039"		-		Affected
Dbd-mysql Project Search vendor "Dbd-mysql Project"		Dbd-mysql Search vendor "Dbd-mysql Project" for product "Dbd-mysql"				4.040 Search vendor "Dbd-mysql Project" for product "Dbd-mysql" and version "4.040"		-		Affected