PT-2009-3304 · Perl+1 · Dbd::Pg+1

Publicado

2009-04-30

·

Atualizado

2017-09-29

·

CVE-2009-0663

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions DBD::Pg module version 1.49
Description A heap-based buffer overflow issue exists in the DBD::Pg module for Perl, potentially allowing attackers to execute arbitrary code. This issue arises when unspecified input is provided to an application that utilizes the getline and pg getline functions to read database rows.
Recommendations For DBD::Pg module version 1.49, consider updating to a newer version that addresses this issue, as using the getline and pg getline functions with untrusted input may lead to exploitation. As a temporary workaround, restrict the use of these functions with untrusted data until a patch is available.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-0663
DSA-1780-1
RHSA-2009:0479
RHSA-2009:1067
RHSA-2009_0479

Produtos afetados

Dbd::Pg
Red Hat