AZL-92427

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92427.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-92427

Upstream

CVE-2026-60081

Published

2026-07-14T16:17:03Z

Modified

2026-08-28T17:48:12Z

Summary

CVE-2026-60081 affecting package perl-DBI for versions less than 1.651-1

Details

DBI::ProfileData versions before 1.651 for Perl do not limit the path index.

The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-60081

Affected packages

Azure Linux:3 / perl-DBI

Package

Name: perl-DBI
Purl: pkg:rpm/azure-linux/perl-DBI

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.651-1

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-92427.json"