Description
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
References (4)
Core 4
Core References
Release Notes, Third Party Advisory x_refsource_misc
https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.632-9th-Nov-2014
Patch, Third Party Advisory x_refsource_misc
https://github.com/perl5-dbi/dbi/commit/a8b98e988d6ea2946f5f56691d6d5ead53f65766
Third Party Advisory x_refsource_misc
https://rt.cpan.org/Public/Bug/Display.html?id=86744#txn-1880941
Third Party Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/4509-1/
Scores
CVSS v3
5.3
EPSS
0.0274
EPSS Percentile
84.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-119
Status
published
Products (2)
canonical/ubuntu_linux
14.04
perl/dbi
< 1.632
Published
Sep 11, 2020
Tracked Since
Feb 18, 2026