CVE-2016-1246

Name	CVE-2016-1246
Description	Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
References	DLA-656-1, DSA-3684-1
NVD severity	medium (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libdbd-mysql-perl (PTS)	jessie (security), jessie	4.028-2+deb8u2	fixed
	stretch	4.041-2	fixed
	bullseye, sid, buster	4.050-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
libdbd-mysql-perl	source	(unstable)	4.037-1	low
libdbd-mysql-perl	source	jessie	4.028-2+deb8u2	medium	DSA-3684-1
libdbd-mysql-perl	source	wheezy	4.021-1+deb7u2	medium	DLA-656-1

https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b0e85dfdefd2 (4.037)