CVE-2017-10788
CriticalSummary
The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering certain error responses from a MySQL server or a loss of a network connection to a MySQL server.
Risk Assessment
Organizations may experience application downtime and potential security issues, which could lead to data loss or service availability problems.
Recommendation
It is recommended to update the DBD::mysql module to the latest version to mitigate this vulnerability and review the documentation for proper usage of connection closing functions.
Original NVD description (English source)
The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.