CVE Catalog
CVE-2015-8949
CriticalSummary
Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login.
Risk Assessment
The organization may be exposed to unforeseen consequences that could lead to data integrity breaches or unauthorized access.
Recommendation
It is recommended to update DBD::mysql to version 4.033_01 or later to mitigate this vulnerability.
Original NVD description (English source)
Use-after-free vulnerability in the my_login function in DBD::mysql before 4.033_01 allows attackers to have unspecified impact by leveraging a call to mysql_errno after a failure of my_login.