Use after free in my_login() function of DBD::mysql (Perl module)

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

DBD::mysql versions 4.033 and earlier have a use after free bug in the my_login() function. DBD::mysql is a Perl module providing bindings to the mysql database. The issue was fixed in version 4.034. This issue was discovered with Address Sanitizer. Pull request / patch CVE-2015-8949

Read on blog.fuzzing-project.org ↗