CVE-2016-1246

Опубликовано: 05 окт. 2016

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.

Ссылки

http://blogs.perl.org/users/mike_b/2016/10/security-release---buffer-overflow-in-dbdmysql-perl-library.html
Third Party Advisory
Vendor Advisory
http://www.debian.org/security/2016/dsa-3684
Third Party Advisory
http://www.securityfocus.com/bid/93337
Third Party Advisory
VDB Entry
https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b0e85dfdefd2
Issue Tracking
Patch
https://security.gentoo.org/glsa/201701-51
Patch
Third Party Advisory
VDB Entry
http://blogs.perl.org/users/mike_b/2016/10/security-release---buffer-overflow-in-dbdmysql-perl-library.html
Third Party Advisory
Vendor Advisory
http://www.debian.org/security/2016/dsa-3684
Third Party Advisory
http://www.securityfocus.com/bid/93337
Third Party Advisory
VDB Entry
https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b0e85dfdefd2
Issue Tracking
Patch
https://security.gentoo.org/glsa/201701-51
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:dbd-mysql_project:dbd-mysql:*:*:*:*:*:*:*:*

Версия до 4.036 (включая)

cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 83%

0.01934

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2016-1246

CVSS3: 7.5

ubuntu

больше 9 лет назад

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.

CVE-2016-1246

CVSS3: 7.5

redhat

больше 9 лет назад

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.

CVE-2016-1246

CVSS3: 7.5

debian

больше 9 лет назад

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows ...

GHSA-cc4c-8jxw-7x26

CVSS3: 7.5

github

больше 3 лет назад

Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.

BDU:2017-02609

CVSS3: 7.5

fstec

больше 9 лет назад

Уязвимость драйвера баз данных MySQL и MariaDB для Perl Database Interface (DBI), связанная с переполнением буфера, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 83%

0.01934

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-119