CVE-2015-8949
Summary
| CVE | CVE-2015-8949 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2016-08-19 21:59:00 UTC |
|---|
| Updated | 2017-07-01 01:29:00 UTC |
|---|
| Description | Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| DBD::mysql: Multiple vulnerabilities (GLSA 201701-51) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| Fix use after free error. by hannob · Pull Request #45 · perl5-dbi/DBD-mysql · GitHub |
CONFIRM |
github.com |
Issue Tracking, Patch |
| DBD::mysql 'my_login()' Function Use After Free Remote Code Execution Vulnerability |
BID |
www.securityfocus.com |
|
| Merge pull request #45 from hannob/master · perl5-dbi/DBD-mysql@cf0aa77 · GitHub |
CONFIRM |
github.com |
Issue Tracking, Patch |
| oss-security - Re: Use after free in my_login() function of DBD::mysql (Perl module) |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| Debian -- Security Information -- DSA-3635-1 libdbd-mysql-perl |
DEBIAN |
www.debian.org |
Third Party Advisory |
| DBD-mysql/Changes at 4.033_01 · perl5-dbi/DBD-mysql · GitHub |
CONFIRM |
github.com |
Release Notes |
| oss-security - Use after free in my_login() function of DBD::mysql (Perl module) |
MLIST |
www.openwall.com |
Mailing List, Third Party Advisory |
| Use after free in my_login() function of DBD::mysql (Perl module) | The Fuzzing Project |
MISC |
blog.fuzzing-project.org |
Third Party Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710496 Gentoo Linux DBD Vulnerability (GLSA 201701-51)
