rpm package
almalinux/perl-DBI
pkg:rpm/almalinux/perl-DBI
Vulnerabilities (7)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-88815 | Med | 6.2 | < 1.643-9.el9_8.7 | 1.643-9.el9_8.7 | Sep 28, 2026 | DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (N | |
| CVE-2026-73194 | Cri | 9.1 | < 1.641-10.module_el8.10.0+4282+4ee1dbd0 | 1.641-10.module_el8.10.0+4282+4ee1dbd0 | Aug 15, 2026 | DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the numb | |
| CVE-2026-19546 | Hig | 8.8 | < 1.643-26.el10_2.4 | 1.643-26.el10_2.4 | Aug 11, 2026 | A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546. | |
| CVE-2026-14739 | Cri | 9.8 | < 1.643-26.el10_2.3 | 1.643-26.el10_2.3 | Jul 7, 2026 | DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,9 | |
| CVE-2026-14380 | Hig | 8.8 | < 1.643-26.el10_2.3 | 1.643-26.el10_2.3 | Jul 7, 2026 | DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation | |
| CVE-2026-9698 | Cri | 9.8 | < 1.643-9.el9_8.1 | 1.643-9.el9_8.1 | Jun 9, 2026 | DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an applicati | |
| CVE-2026-10879 | Cri | 9.8 | < 1.641-2.el8_10 | 1.641-2.el8_10 | Jun 5, 2026 | DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholder |
- affected < 1.643-9.el9_8.7fixed 1.643-9.el9_8.7
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (N
- affected < 1.641-10.module_el8.10.0+4282+4ee1dbd0fixed 1.641-10.module_el8.10.0+4282+4ee1dbd0
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the numb
- affected < 1.643-26.el10_2.4fixed 1.643-26.el10_2.4
A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Description and Mitigation please reffer to the original https://access.redhat.com/security/cve/cve-2026-19546.
- affected < 1.643-26.el10_2.3fixed 1.643-26.el10_2.3
DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,9
- affected < 1.643-26.el10_2.3fixed 1.643-26.el10_2.3
DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation
- affected < 1.643-9.el9_8.1fixed 1.643-9.el9_8.1
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an applicati
- affected < 1.641-2.el8_10fixed 1.641-2.el8_10
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholder