PatchTheCVEdbd-mysql vulnerabilities and fixes
Recent CVEs affecting dbd-mysql, with upgrade or downgrade steps. 7 tracked.
Also searched as: dbd mysql.
dbd-mysql has 7 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2017-07-01. Highest priority: CVE-2014-9906 (score 68/100).
- CVE-2017-10789 MEDIUM 5.9 UPGRADE The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even t
- CVE-2017-10788 CRITICAL 9.8 UPGRADE The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-f
- CVE-2016-1251 HIGH 8.1 DOWNGRADE There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface
- CVE-2016-1249 MEDIUM 5.9 UPGRADE The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attacke
- CVE-2016-1246 HIGH 7.5 UPGRADE MITIGATE Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a d
- CVE-2015-8949 CRITICAL 9.8 DOWNGRADE MITIGATE Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have u
- CVE-2014-9906 CRITICAL 9.8 MITIGATE UPGRADE Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program
FAQ
How do I fix dbd-mysql vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is dbd-mysql being exploited right now?
None of the tracked dbd-mysql CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which dbd-mysql CVE should I patch first?
CVE-2014-9906 currently ranks highest (68/100): Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program.