AZL-89559
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-89559.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-89559
- Upstream
- Published
- 2026-06-05T15:16:46Z
- Modified
- 2026-08-28T17:48:10Z
- Summary
- CVE-2026-10879 affecting package perl-DBI for versions less than 1.643-5
- Details
-
DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.
The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.
- References