CVE-2020-14393

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2020-14393

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-14393.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-14393

Related

Published

2020-09-16T14:15:12Z

Modified

2024-12-05T15:24:22.384444Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSS Calculator

Summary

[none]

Details

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

References

Affected packages

Alpine:v3.12 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.13 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.14 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.15 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.16 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.17 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.18 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.19 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.20 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Affected versions

1.*

1.612-r0

1.615-r0

1.616-r0

1.616-r1

1.618-r0

1.618-r1

1.622-r0

1.623-r0

1.625-r0

1.625-r1

1.627-r1

1.628-r0

1.630-r0

1.631-r0

1.631-r1

1.632-r0

1.633-r0

1.633-r1

1.634-r0

1.634-r1

1.636-r0

1.636-r1

1.637-r0

1.639-r0

1.640-r0

1.641-r0

1.642-r0

1.642-r1

1.642-r2

Alpine:v3.21 / perl-dbi

Package

Name: perl-dbi
Purl: pkg:apk/alpine/perl-dbi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-r0

Debian:11 / libdbi-perl

Package

Name: libdbi-perl
Purl: pkg:deb/debian/libdbi-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / libdbi-perl

Package

Name: libdbi-perl
Purl: pkg:deb/debian/libdbi-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / libdbi-perl

Package

Name: libdbi-perl
Purl: pkg:deb/debian/libdbi-perl?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.643-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/perl5-dbi/dbi

Affected ranges

Type: GIT
Repo: https://github.com/perl5-dbi/dbi
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

4a68c5a79ab859b6308dd742ac2d2416e3d0dd92

Affected versions

1.*

1.602

1.607

1.611_90

1.611_91

1.611_92

1.611_93

1.611_94

1.613_70

1.613_71

1.613_90

1.613_91

1.613_92

1.613_93

1.614_90

1.615

1.618

1.619

1.622

1.624

1.625

1.626

1.627

1.628

1.630

1.631

1.632

1.632_90

1.633

1.633_90

1.633_91

1.633_92

1.634

1.635

1.636

1.637

1.638

1.639

1.640

1.641

1.642

DBI-1.*

DBI-1.47

DBI-1.51

DBI-1.57

DBI-1.58