Dbd Mysql
Vendor:
First CVE: Aug 19, 2016 · Active for 9 years
7
Total CVEs
More Total CVEs than 85% of tracked products
3.5
Avg CVEs / Year
Higher CVE frequency than 84% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 73% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Dbd Mysql over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 19, 2016
9 years ago
Most Recent CVE
Jul 1, 2017
3,314 days ago
CVE Severity & Scoring
Dbd Mysql7 CVEs
29%
29%
43%
All CVEs353,173 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low4 (57.1%)
High3 (42.9%)
Unknown0 (0.0%)
User Interaction
None7 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None7 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-9906CRITICAL Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lo | Aug 19, 2016 | 9.8 | 32 | NO | NO |
CVE-2015-8949CRITICAL Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure | Aug 19, 2016 | 9.8 | 31 | NO | NO |
CVE-2017-10788CRITICAL The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact b | Jul 1, 2017 | 9.8 | 25 | NO | NO |
CVE-2016-1251HIGH There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with m | Nov 29, 2016 | 8.1 | 21 | NO | NO |
CVE-2016-1246HIGH Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message. | Oct 5, 2016 | 7.5 | 20 | NO | NO |
CVE-2017-10789MEDIUM The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the | Jul 1, 2017 | 5.9 | 17 | NO | NO |
CVE-2016-1249MEDIUM The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors invol | Feb 17, 2017 | 5.9 | 17 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (7 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (7 CVEs).
Media Mentions
Signals from CVEs in this product scope (7 CVEs).
Top CNAs Publishing CVEs For Dbd Mysql
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 4.040 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.039 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.038_01 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.038 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.037_01 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.037 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.036 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.035_03 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.035_02 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.035_01 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.035 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.034 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.033_03 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.033_02 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.033_01 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.033 | 2 | 8.9 | 3.8% | 0 | 0 |
| 4.032_03 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.032_02 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.032_01 | 1 | 8.1 | 3.1% | 0 | 0 |
| 4.032 | 1 | 8.1 | 3.1% | 0 | 0 |