High
Security advisory
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2016-1251
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 09:02 UTC · Revision 1
Source evidence
There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.
osv:CVE-2016-1251
Complete source record
{
"id": "6ed3057a37e73c450bc0a55bc4e76cc6a637b062f6a3e5e822292929833c5bcc",
"url": "https://osv.dev/vulnerability/CVE-2016-1251",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2016-1251",
"summary": "There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare=1.",
"evidence": "osv:CVE-2016-1251",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2016-1251",
"aliases": [
"CVE-2016-1251"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/perl5-dbi/dbd-mysql",
"type": "GIT",
"events": [
{
"introduced": "6a18c6bbe7474e363c1020c74f0c19758f2ba519"
},
{
"last_affected": "ebdd95e4bea5c1de510f145c92be2d917bd263a1"
},
{
"fixed": "3619c170461a3107a258d1fd2d00ed4832adb1b1"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.012"
},
{
"last_affected": "4.012"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.013"
},
{
"last_affected": "4.013"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.014"
},
{
"last_affected": "4.014"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.015"
},
{
"last_affected": "4.015"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.019"
},
{
"last_affected": "4.019"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.020"
},
{
"last_affected": "4.020"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.021"
},
{
"last_affected": "4.021"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.022"
},
{
"last_affected": "4.022"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.030_01"
},
{
"last_affected": "4.030_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.030_02"
},
{
"last_affected": "4.030_02"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.031"
},
{
"last_affected": "4.031"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.032"
},
{
"last_affected": "4.032"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.032_01"
},
{
"last_affected": "4.032_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.032_02"
},
{
"last_affected": "4.032_02"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.032_03"
},
{
"last_affected": "4.032_03"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.033"
},
{
"last_affected": "4.033"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.033_01"
},
{
"last_affected": "4.033_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.033_02"
},
{
"last_affected": "4.033_02"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.033_03"
},
{
"last_affected": "4.033_03"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.034"
},
{
"last_affected": "4.034"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.035"
},
{
"last_affected": "4.035"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.035_01"
},
{
"last_affected": "4.035_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.035_02"
},
{
"last_affected": "4.035_02"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.035_03"
},
{
"last_affected": "4.035_03"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.036"
},
{
"last_affected": "4.036"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.037"
},
{
"last_affected": "4.037"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.037_01"
},
{
"last_affected": "4.037_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.038"
},
{
"last_affected": "4.038"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.038_01"
},
{
"last_affected": "4.038_01"
}
],
"source": "CPE_STRING"
},
{
"cpe": "cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040:*:*:*:*:*:*:*",
"range": [
{
"introduced": "4.040"
},
{
"last_affected": "4.040"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "3619c170461a3107a258d1fd2d00ed4832adb1b1"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"4.012",
"4.013",
"4.014",
"4.015",
"4.019",
"4.020",
"4.021",
"4.022",
"4.030_01",
"4.030_02",
"4.031",
"4.032",
"4.032_01",
"4.032_02",
"4.032_03",
"4.033",
"4.033_01",
"4.033_02",
"4.033_03",
"4.034",
"4.035",
"4.035_01",
"4.035_02",
"4.035_03",
"4.036",
"4.037",
"4.037_01",
"4.038",
"4.038_01",
"4.040",
"4.037_02",
"4_022_1",
"4_022",
"4_020",
"4_019",
"4_015",
"4_014",
"4_013",
"4_012"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-1251.json",
"vanir_signatures": [
{
"id": "CVE-2016-1251-1b003cbb",
"digest": {
"threshold": 0.9,
"line_hashes": [
"188715675733561009446976502882346480394",
"107950256441078376794216765617357782574",
"196453871356809793990021036321253799454",
"324900896622681343079356612221884188937"
]
},
"source": "https://github.com/perl5-dbi/dbd-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1",
"target": {
"file": "dbdimp.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2016-1251-f95694e2",
"digest": {
"length": 8291,
"function_hash": "326296235982873098261977955735233036713"
},
"source": "https://github.com/perl5-dbi/dbd-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1",
"target": {
"file": "dbdimp.c",
"function": "dbd_st_fetch"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-24T14:03:58Z"
}
}
],
"modified": "2026-10-24T14:03:58.979318586Z",
"provider": "osv",
"references": [
"https://security.gentoo.org/glsa/201701-51",
"https://tracker.debian.org/news/819888",
"https://anonscm.debian.org/cgit/pkg-perl/packages/libdbd-mysql-perl.git/commit/?id=a8b97e4713391b1f8beffbfddac483c276feaff1",
"https://github.com/perl5-dbi/DBD-mysql/commit/3619c170461a3107a258d1fd2d00ed4832adb1b1"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029:*:*:*:*:*:*:*",
"cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039:*:*:*:*:*:*:*"
],
"vendor_product": "dbd-mysql_project:dbd-mysql",
"extracted_events": [
{
"range": [
{
"introduced": "3.0000_0"
},
{
"last_affected": "3.0000_0"
},
{
"introduced": "3.0001_1"
},
{
"last_affected": "3.0001_1"
},
{
"introduced": "3.0001_2"
},
{
"last_affected": "3.0001_2"
},
{
"introduced": "3.0001_3"
},
{
"last_affected": "3.0001_3"
},
{
"introduced": "3.0002_1"
},
{
"last_affected": "3.0002_1"
},
{
"introduced": "3.0002_2"
},
{
"last_affected": "3.0002_2"
},
{
"introduced": "3.0002_3"
},
{
"last_affected": "3.0002_3"
},
{
"introduced": "3.0002_4"
},
{
"last_affected": "3.0002_4"
},
{
"introduced": "3.0002_5"
},
{
"last_affected": "3.0002_5"
},
{
"introduced": "3.0003_1"
},
{
"last_affected": "3.0003_1"
},
{
"introduced": "3.0004_1"
},
{
"last_affected": "3.0004_1"
},
{
"introduced": "3.0005"
},
{
"last_affected": "3.0005"
},
{
"introduced": "3.0005_1"
},
{
"last_affected": "3.0005_1"
},
{
"introduced": "3.0007_2"
},
{
"last_affected": "3.0007_2"
},
{
"introduced": "3.0008_1"
},
{
"last_affected": "3.0008_1"
},
{
"introduced": "3.0009_1"
},
{
"last_affected": "3.0009_1"
},
{
"introduced": "4.00"
},
{
"last_affected": "4.00"
},
{
"introduced": "4.001"
},
{
"last_affected": "4.001"
},
{
"introduced": "4.002"
},
{
"last_affected": "4.002"
},
{
"introduced": "4.003"
},
{
"last_affected": "4.003"
},
{
"introduced": "4.004"
},
{
"last_affected": "4.004"
},
{
"introduced": "4.005"
},
{
"last_affected": "4.005"
},
{
"introduced": "4.006"
},
{
"last_affected": "4.006"
},
{
"introduced": "4.007"
},
{
"last_affected": "4.007"
},
{
"introduced": "4.008"
},
{
"last_affected": "4.008"
},
{
"introduced": "4.009"
},
{
"last_affected": "4.009"
},
{
"introduced": "4.010"
},
{
"last_affected": "4.010"
},
{
"introduced": "4.011"
},
{
"last_affected": "4.011"
},
{
"introduced": "4.016"
},
{
"last_affected": "4.016"
},
{
"introduced": "4.017"
},
{
"last_affected": "4.017"
},
{
"introduced": "4.018"
},
{
"last_affected": "4.018"
},
{
"introduced": "4.023"
},
{
"last_affected": "4.023"
},
{
"introduced": "4.024"
},
{
"last_affected": "4.024"
},
{
"introduced": "4.025"
},
{
"last_affected": "4.025"
},
{
"introduced": "4.026"
},
{
"last_affected": "4.026"
},
{
"introduced": "4.027"
},
{
"last_affected": "4.027"
},
{
"introduced": "4.028"
},
{
"last_affected": "4.028"
},
{
"introduced": "4.029"
},
{
"last_affected": "4.029"
},
{
"introduced": "4.039"
},
{
"last_affected": "4.039"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2016-1251",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 442879,
"published_at": "2016-11-29T20:59:00.17+00:00"
}