CVE-2014-9906: Dbd-MySQL Project Dbd-MySQL

Critical severity, CVSS 9.8. EPSS: 6.1% chance of exploitation in the next 30 days.

Use-after-free vulnerability in DBD::mysql before 4.029 allows attackers to cause a denial of service (program crash) or possibly execute arbitrary code via vectors related to a lost server connection.

Affected products

• Dbd-MySQL Project Dbd-MySQL: up to and including 4.028
• Debian Debian Linux: version 8.0 only

Published 2016-08-19. Last modified 2026-06-17.