CVE-2016-1251
- Source
- https://cve.org/CVERecord?id=CVE-2016-1251
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1251.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2016-1251
- Downstream
- Related
- Published
- 2016-11-29T20:59:00.170Z
- Modified
- 2026-07-08T12:44:33.970918Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysqlserverprepare=1.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:*" ], "source": "CPE_STRING", "extracted_events": [ { "introduced": "3.0000_0" }, { "last_affected": "3.0000_0" }, { "introduced": "3.0001_1" }, { "last_affected": "3.0001_1" }, { "introduced": "3.0001_2" }, { "last_affected": "3.0001_2" }, { "introduced": "3.0001_3" }, { "last_affected": "3.0001_3" }, { "introduced": "3.0002_1" }, { "last_affected": "3.0002_1" }, { "introduced": "3.0002_2" }, { "last_affected": "3.0002_2" }, { "introduced": "3.0002_3" }, { "last_affected": "3.0002_3" }, { "introduced": "3.0002_4" }, { "last_affected": "3.0002_4" }, { "introduced": "3.0002_5" }, { "last_affected": "3.0002_5" }, { "introduced": "3.0003_1" }, { "last_affected": "3.0003_1" }, { "introduced": "3.0004_1" }, { "last_affected": "3.0004_1" }, { "introduced": "3.0005" }, { "last_affected": "3.0005" }, { "introduced": "3.0005_1" }, { "last_affected": "3.0005_1" }, { "introduced": "3.0007_2" }, { "last_affected": "3.0007_2" }, { "introduced": "3.0008_1" }, { "last_affected": "3.0008_1" }, { "introduced": "3.0009_1" }, { "last_affected": "3.0009_1" }, { "introduced": "4.00" }, { "last_affected": "4.00" }, { "introduced": "4.001" }, { "last_affected": "4.001" }, { "introduced": "4.002" }, { "last_affected": "4.002" }, { "introduced": "4.003" }, { "last_affected": "4.003" }, { "introduced": "4.004" }, { "last_affected": "4.004" }, { "introduced": "4.005" }, { "last_affected": "4.005" }, { "introduced": "4.006" }, { "last_affected": "4.006" }, { "introduced": "4.007" }, { "last_affected": "4.007" }, { "introduced": "4.008" }, { "last_affected": "4.008" }, { "introduced": "4.009" }, { "last_affected": "4.009" }, { "introduced": "4.010" }, { "last_affected": "4.010" }, { "introduced": "4.011" }, { "last_affected": "4.011" }, { "introduced": "4.016" }, { "last_affected": "4.016" }, { "introduced": "4.017" }, { "last_affected": "4.017" }, { "introduced": "4.018" }, { "last_affected": "4.018" }, { "introduced": "4.023" }, { "last_affected": "4.023" }, { "introduced": "4.024" }, { "last_affected": "4.024" }, { "introduced": "4.025" }, { "last_affected": "4.025" }, { "introduced": "4.026" }, { "last_affected": "4.026" }, { "introduced": "4.027" }, { "last_affected": "4.027" }, { "introduced": "4.028" }, { "last_affected": "4.028" }, { "introduced": "4.029" }, { "last_affected": "4.029" }, { "introduced": "4.039" }, { "last_affected": "4.039" } ], "vendor_product": "dbd-mysql_project:dbd-mysql" } ] }- References
-
- http://www.openwall.com/lists/oss-security/2016/11/28/2
- http://www.securityfocus.com/bid/94573
- https://security.gentoo.org/glsa/201701-51
- https://tracker.debian.org/news/819888
- https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1
- https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1
Affected packages
Git / github.com/perl5-dbi/dbd-mysql
Affected ranges
- Type
- GIT
- Repo
- https://github.com/perl5-dbi/dbd-mysql
- Events
-
IntroducedLast affectedFixed
- Database specific
{ "cpe": [ "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:*", "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:*" ], "source": [ "CPE_STRING", "REFERENCES" ], "extracted_events": [ { "introduced": "4.012" }, { "last_affected": "4.012" }, { "introduced": "4.013" }, { "last_affected": "4.013" }, { "introduced": "4.014" }, { "last_affected": "4.014" }, { "introduced": "4.015" }, { "last_affected": "4.015" }, { "introduced": "4.019" }, { "last_affected": "4.019" }, { "introduced": "4.020" }, { "last_affected": "4.020" }, { "introduced": "4.021" }, { "last_affected": "4.021" }, { "introduced": "4.022" }, { "last_affected": "4.022" }, { "introduced": "4.030_01" }, { "last_affected": "4.030_01" }, { "introduced": "4.030_02" }, { "last_affected": "4.030_02" }, { "introduced": "4.031" }, { "last_affected": "4.031" }, { "introduced": "4.032" }, { "last_affected": "4.032" }, { "introduced": "4.032_01" }, { "last_affected": "4.032_01" }, { "introduced": "4.032_02" }, { "last_affected": "4.032_02" }, { "introduced": "4.032_03" }, { "last_affected": "4.032_03" }, { "introduced": "4.033" }, { "last_affected": "4.033" }, { "introduced": "4.033_01" }, { "last_affected": "4.033_01" }, { "introduced": "4.033_02" }, { "last_affected": "4.033_02" }, { "introduced": "4.033_03" }, { "last_affected": "4.033_03" }, { "introduced": "4.034" }, { "last_affected": "4.034" }, { "introduced": "4.035" }, { "last_affected": "4.035" }, { "introduced": "4.035_01" }, { "last_affected": "4.035_01" }, { "introduced": "4.035_02" }, { "last_affected": "4.035_02" }, { "introduced": "4.035_03" }, { "last_affected": "4.035_03" }, { "introduced": "4.036" }, { "last_affected": "4.036" }, { "introduced": "4.037" }, { "last_affected": "4.037" }, { "introduced": "4.037_01" }, { "last_affected": "4.037_01" }, { "introduced": "4.038" }, { "last_affected": "4.038" }, { "introduced": "4.038_01" }, { "last_affected": "4.038_01" }, { "introduced": "4.040" }, { "last_affected": "4.040" } ] }
Affected versions
4.*
4.012
4.013
4.014
4.015
4.019
4.020
4.021
4.022
4.030_01
4.030_02
4.031
4.032
4.032_01
4.032_02
4.032_03
4.033
4.033_01
4.033_02
4.033_03
4.034
4.035
4.035_01
4.035_02
4.035_03
4.036
4.037
4.037_01
4.037_02
4.038
4.038_01
4.040
Other
4_012
4_013
4_014
4_015
4_019
4_020
4_022
4_022_1
Database specific
vanir_signatures_modified
"2026-07-08T12:44:33Z"
vanir_signatures
[
{
"signature_type": "Line",
"target": {
"file": "dbdimp.c"
},
"deprecated": false,
"source": "https://github.com/perl5-dbi/dbd-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1",
"id": "CVE-2016-1251-1b003cbb",
"signature_version": "v1",
"digest": {
"line_hashes": [
"188715675733561009446976502882346480394",
"107950256441078376794216765617357782574",
"196453871356809793990021036321253799454",
"324900896622681343079356612221884188937"
],
"threshold": 0.9
}
},
{
"signature_type": "Function",
"target": {
"file": "dbdimp.c",
"function": "dbd_st_fetch"
},
"deprecated": false,
"source": "https://github.com/perl5-dbi/dbd-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1",
"id": "CVE-2016-1251-f95694e2",
"signature_version": "v1",
"digest": {
"function_hash": "326296235982873098261977955735233036713",
"length": 8291.0
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1251.json"