Catalogo CVE

CVE-2017-10788

libdbd-mysql-perl: CVE-2017-10788

[Catalogo CVE]

Gravità
Medium
Published
Source
[NVD] · [CVE record]
EPSS
4.63% · Oct 22, 2026

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibdbd-mysql-perlsid4.055-1fixed
Debianlibdbd-mysql-perlforky4.055-1fixed
Debianlibdbd-mysql-perltrixie4.053-1fixed
Debianlibdbd-mysql-perlbookworm4.050-5fixed
Opensuseperl-DBD-mysqltumbleweed4.050-2.14fixed
Suseperl-DBD-mysqllinux enterprise server 12 sp34.021-12.5.2fixed
Suseperl-DBD-mysqllinux enterprise server for sap applications 12 sp34.021-12.5.2fixed
Ubuntulibdbd-mysql-perlpro4.028-2vulnerable
Ubuntulibdbd-mysql-perlpro4.033-1vulnerable
Ubuntulibdbd-mysql-perlpro4.033-1build1vulnerable
Ubuntulibdbd-mysql-perlpro4.033-1build2vulnerable
Ubuntulibdbd-mysql-perlpro4.033-1ubuntu0.1vulnerable
Ubuntulibdbd-mysql-perlpro4.033-1ubuntu0.1+esm1fixed
Suseperl-DBD-mysqllinux enterprise software development kit 11 sp44.008-10.5.1fixed
Suseperl-DBD-mysqllinux enterprise server 11 sp44.008-10.5.1fixed
Suseperl-DBD-mysqllinux enterprise server for sap applications 11 sp44.008-10.5.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibdbd-mysql-perlsourcesid4.046-1not yet assignedNot reported[866818]
Debianlibdbd-mysql-perlsourceforky4.046-1not yet assignedNot reported[866818]
Debianlibdbd-mysql-perlsourcetrixie4.046-1not yet assignedNot reported[866818]
Debianlibdbd-mysql-perlsourcebookworm4.046-1not yet assignedNot reported[866818]
Opensuseperl-DBD-mysqlrpmtumbleweed4.050-2.14Not reportedOPENSUSE-SU-2024:11160-1Not reported
Suseperl-DBD-mysqlrpmlinux enterprise server 12 sp34.021-12.5.2Not reportedSUSE-SU-2018:1450-1Not reported
Suseperl-DBD-mysqlrpmlinux enterprise server for sap applications 12 sp34.021-12.5.2Not reportedSUSE-SU-2018:1450-1Not reported
Ubuntulibdbd-mysql-perldebpro4.033-1ubuntu0.1+esm1Not reportedUBUNTU-CVE-2017-10788Not reported
Suseperl-DBD-mysqlrpmlinux enterprise software development kit 11 sp44.008-10.5.1Not reportedSUSE-SU-2018:1449-1Not reported
Suseperl-DBD-mysqlrpmlinux enterprise server 11 sp44.008-10.5.1Not reportedSUSE-SU-2018:1449-1Not reported
Suseperl-DBD-mysqlrpmlinux enterprise server for sap applications 11 sp44.008-10.5.1Not reportedSUSE-SU-2018:1449-1Not reported

[Debian bug #866818]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libdbd-mysql-perl]Corretta

    Pacchetto sorgente: [libdbd-mysql-perl]

    Dettagli (2)

    • 4.050-5+b1 · amd64 · bookworm

      Corretta · Corretta: 4.046-1

      dsa · libdbd-mysql-perl · debian · bookworm; dsa · libdbd-mysql-perl · debian · 12

    • 4.050-5+b1 · arm64 · bookworm

      Corretta · Corretta: 4.046-1

      dsa · libdbd-mysql-perl · debian · bookworm; dsa · libdbd-mysql-perl · debian · 12

[Debian 13 (Trixie)]

  • [libdbd-mysql-perl]Corretta
    Dettagli (2)

    • 4.053-1 · amd64 · trixie

      Corretta · Corretta: 4.046-1

      dsa · libdbd-mysql-perl · debian · 13

    • 4.053-1 · arm64 · trixie

      Corretta · Corretta: 4.046-1

      dsa · libdbd-mysql-perl · debian · 13

[openSUSE Tumbleweed]

  • [perl-DBD-mysql]Corretta

    Pacchetto sorgente: [perl-DBD-mysql]

    Dettagli (1)

    • 4.050-3.10 · x86_64 · tumbleweed

      Corretta · Corretta: 4.050-2.14

      dsa · perl-DBD-mysql · opensuse · tumbleweed

Osservato:

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]