CVE-2014-9906

Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.

• CWE-416

• http://cpansearch.perl.org/src/CAPTTOFU/DBD-mysql-4.029/ChangeLogRelease Notes
• http://www.debian.org/security/2016/dsa-3635Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/27/5Mailing List, VDB Entry
• http://www.openwall.com/lists/oss-security/2016/07/27/6Mailing List, VDB Entry
• http://www.securityfocus.com/bid/92149
• https://github.com/perl5-dbi/DBD-mysql/commit/a56ae87a4c1c1fead7d09c3653905841ccccf1ccIssue Tracking, Patch
• https://rt.cpan.org/Public/Bug/Display.html?id=97625Issue Tracking
• http://cpansearch.perl.org/src/CAPTTOFU/DBD-mysql-4.029/ChangeLogRelease Notes
• http://www.debian.org/security/2016/dsa-3635Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/27/5Mailing List, VDB Entry
• http://www.openwall.com/lists/oss-security/2016/07/27/6Mailing List, VDB Entry
• http://www.securityfocus.com/bid/92149
• https://github.com/perl5-dbi/DBD-mysql/commit/a56ae87a4c1c1fead7d09c3653905841ccccf1ccIssue Tracking, Patch
• https://rt.cpan.org/Public/Bug/Display.html?id=97625Issue Tracking

Published

Aug 19, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9900The ethtool_get_wol function in net/core/ethtool.c in the Li…
• CVE-2014-9901The Qualcomm Wi-Fi driver in Android before 2016-08-05 on Ne…
• CVE-2014-9902Buffer overflow in CORE/SYS/legacy/src/utils/src/dot11f.c in…
• CVE-2014-9903The sched_read_attr function in kernel/sched/core.c in the L…
• CVE-2014-9904The snd_compress_check_input function in sound/core/compress…7.8
• CVE-2014-9905Multiple cross-site scripting (XSS) vulnerabilities in the W…6.1
• CVE-2014-9907coders/dds.c in ImageMagick allows remote attackers to cause…6.5
• CVE-2014-9908A Denial of Service vulnerability exists in Google Android 4…6.5
• CVE-2014-9909An elevation of privilege vulnerability in the Broadcom Wi-F…
• CVE-2014-9910An elevation of privilege vulnerability in the Broadcom Wi-F…
• CVE-2014-9911Stack-based buffer overflow in the ures_getByKeyWithFallback…
• CVE-2014-9912The get_icu_disp_value_src_php function in ext/intl/locale/l…