VYPR

rpm package

suse/perl-DBD-mysql&distro=SUSE Linux Enterprise Server 12 SP2

pkg:rpm/suse/perl-DBD-mysql&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2

Vulnerabilities (3)

  • CVE-2016-1249MedFeb 17, 2017
    affected < 4.021-11.1fixed 4.021-11.1

    The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.

  • CVE-2016-1251HigNov 29, 2016
    affected < 4.021-11.1fixed 4.021-11.1

    There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.

  • CVE-2016-1246HigOct 5, 2016
    affected < 4.021-11.1fixed 4.021-11.1

    Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.