CVE-2020-14393

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

References

Affected packages

Git / github.com/perl5-dbi/dbi

Affected ranges

Type

GIT

Repo

https://github.com/perl5-dbi/dbi

Events

Introduced

Fixed

4a68c5a79ab859b6308dd742ac2d2416e3d0dd92

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.643"
        }
    ]
}

Affected versions

1.*

1.602

1.607

1.611_90

1.611_91

1.611_92

1.611_93

1.611_94

1.613_70

1.613_71

1.613_90

1.613_91

1.613_92

1.613_93

1.614_90

1.615

1.618

1.619

1.622

1.624

1.625

1.626

1.627

1.628

1.630

1.631

1.632

1.632_90

1.633

1.633_90

1.633_91

1.633_92

1.634

1.635

1.636

1.637

1.638

1.639

1.640

1.641

1.642

DBI-1.*

DBI-1.47

DBI-1.51

DBI-1.57

DBI-1.58

Database specific

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "15.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14393.json"