Description
A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a perl-dbi
perl-DBI before version 1.643affected
References
- https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=1877409 ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html ↗
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00074.html ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXLKODJ7B57GITDEZZXNSHPK4VBYXYHR/ ↗
- https://lists.debian.org/debian-lts-announce/2020/09/msg00026.html ↗