CVE-2016-1249 — Out-of-bounds Read in Project Dbd-mysql

CWE-125 — Out-of-bounds Read13 documents9 sources
Severity
5.9MEDIUMNVD
EPSS
0.5%
top 34.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dbd-mysql Project Dbd-mysql
Timeline
PublishedFeb 17
Latest updateApr 7

Description

The DBD::mysql module before 4.039 for Perl, when using server-side prepared statement support, allows attackers to cause a denial of service (out-of-bounds read) via vectors involving an unaligned number of placeholders in WHERE condition and output fields in SELECT expression.

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6

Affected Packages1 packages

Patches

Patch: www.openwall.com ↗Patch: github.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

5
OSV
libdbd-mysql-perl vulnerabilities↗2025-04-07
▶
GHSA
GHSA-v93g-vffx-whwx: The DBD::mysql module before 4↗2022-05-13
▶
OSV
libdbd-mysql-perl vulnerabilities↗2022-04-01
▶
OSV
CVE-2016-1249: The DBD::mysql module before 4↗2017-02-17
▶
CVEList
CVE-2016-1249: The DBD::mysql module before 4↗2017-02-16
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Windows (x86) - 'afd.sys' Local Privilege Escalation (MS11-046)↗2016-10-18
▶

📋Vendor Advisories

4
Ubuntu
libdbd-mysql-perl vulnerabilities↗2025-04-07
▶
Ubuntu
DBD::mysql vulnerabilities↗2022-04-01
▶
Red Hat
perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support↗2016-11-15
▶
Debian
CVE-2016-1249: libdbd-mysql-perl - The DBD::mysql module before 4.039 for Perl, when using server-side prepared sta...↗2016
▶

💬Community

2
Bugzilla
CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support [fedora-all]↗2016-11-16
▶
Bugzilla
CVE-2016-1249 perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support↗2016-11-16
▶
CVE-2016-1249 — Out-of-bounds Read in Project Dbd-mysql | cvebase