DBD::MySQL is a Perl database abstraction layer for MySQL connectivity that, despite a narrow product scope, maintains a presence in legacy and specialized Perl applications across diverse deployment contexts. The vendor's disclosures center on the single DBD::MySQL driver and reflect the parsing and protocol-handling complexity inherent to database client libraries. Current severity, exploitation, and exposure metrics are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Dbd Mysql Project over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-9906CRITICAL Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lo | Aug 19, 2016 | 9.8 | 32 | NO | NO |
CVE-2015-8949CRITICAL Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure | Aug 19, 2016 | 9.8 | 31 | NO | NO |
CVE-2017-10788CRITICAL The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact b | Jul 1, 2017 | 9.8 | 25 | NO | NO |
CVE-2016-1251HIGH There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with m | Nov 29, 2016 | 8.1 | 21 | NO | NO |
CVE-2016-1246HIGH Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message. | Oct 5, 2016 | 7.5 | 20 | NO | NO |
CVE-2017-10789MEDIUM The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the | Jul 1, 2017 | 5.9 | 17 | NO | NO |
CVE-2016-1249MEDIUM The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors invol | Feb 17, 2017 | 5.9 | 17 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Dbd Mysql Project.
Media articles that mention a CVE ID that affects a product developed by Dbd Mysql Project — matched by CVE ID, not by vendor name.