Test ID:	1.3.6.1.4.1.25623.1.1.12.2022.5344.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-5344-1)
Summary:	The remote host is missing an update for the 'libdbd-mysql-perl' package(s) announced via the USN-5344-1 advisory.
Description:	Summary: The remote host is missing an update for the 'libdbd-mysql-perl' package(s) announced via the USN-5344-1 advisory. Vulnerability Insight: It was discovered that the DBD::mysql module, when configured with server-side prepared statement support, was susceptible to operations that would result in improper memory access. An attacker could possibly use this issue to cause DBD::mysql to crash, resulting in a denial of service. (CVE-2016-1249, CVE-2016-1251) It was discovered that the DBD::mysql module was susceptible to an operation that would result in improper memory access, introduced through incorrect documentation and code examples. An attacker could possibly use this issue to cause DBD::mysql to crash or potentially cause other, unspecified, impact. (CVE-2017-10788) It was discovered that the DBD::mysql module processed SSL/TLS settings in a way that did not fully correlate with the respective documentation for each setting. An attacker could possibly use this to perform a cleartext-downgrade attack. (CVE-2017-10789) Affected Software/OS: 'libdbd-mysql-perl' package(s) on Ubuntu 16.04. Solution: Please install the updated package(s). CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1249 BugTraq ID: 94350 http://www.securityfocus.com/bid/94350 https://security.gentoo.org/glsa/201701-51 http://www.openwall.com/lists/oss-security/2016/11/16/1 Common Vulnerability Exposure (CVE) ID: CVE-2016-1251 BugTraq ID: 94573 http://www.securityfocus.com/bid/94573 Common Vulnerability Exposure (CVE) ID: CVE-2017-10788 BugTraq ID: 99374 http://www.securityfocus.com/bid/99374 http://seclists.org/oss-sec/2017/q2/443 https://github.com/perl5-dbi/DBD-mysql/issues/120 Common Vulnerability Exposure (CVE) ID: CVE-2017-10789 BugTraq ID: 99364 http://www.securityfocus.com/bid/99364 https://github.com/perl5-dbi/DBD-mysql/issues/110 https://github.com/perl5-dbi/DBD-mysql/issues/140 https://github.com/perl5-dbi/DBD-mysql/pull/114
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.