CVE-2014-9906

Critical

Published: 19/08/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in DBD::mysql before version 4.029 allows attackers to cause a program crash or potentially execute arbitrary code due to a lost server connection.

Risk Assessment

The organization may experience service interruptions and potential unauthorized code execution, leading to data loss or security breaches.

Recommendation

It is recommended to upgrade DBD::mysql to version 4.029 or later to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.