VYPR

Database Interface

by Perl Foundation

CVEs (2)

  • CVE-2020-14393HigSep 16, 2020
    risk 0.46cvss 7.1epss 0.01

    A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

  • CVE-2020-14392MedSep 16, 2020
    risk 0.36cvss 5.5epss 0.01

    An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.