suse · CVE-2017-10788

Quick triage

Priority: medium Published: 2021-05-30 13:58:20 UTC Updated: 2026-04-17 16:05:19 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-10788 severity moderate: SUSE including 7 source package names (perl-DBD-mysql, perl-DBD-mysql-4.008-10.5.1, …), 35 product×package rows across 34 product lines (SUSE CaaS Platform 4.0, SUSE Enterprise Storage 6, … (34 product lines)): Fixed 21, Known Not Affected 14.

Description:

The DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly have unspecified other impact by triggering (1) certain error responses from a MySQL server or (2) a loss of a network connection to a MySQL server. The use-after-free defect was introduced by relying on incorrect Oracle mysql_stmt_close documentation and code examples.

cvelogic Threat Intelligence