PT-2009-3871 · Perl+1 · Dbd::Pg+1

Publicado 2009-04-30 · Atualizado 2017-09-29 · CVE-2009-1341

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions DBD::Pg versions prior to 2.0.0

Description The issue is related to a memory leak in the dequote bytea function, which can be exploited by context-dependent attackers to cause a denial of service through excessive memory consumption. This can be achieved by fetching data that includes BYTEA columns.

Recommendations For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.

Correção

DoS

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-1341

DSA-1780-1

RHSA-2009:0479

RHSA-2009:1067

RHSA-2009_0479

Produtos afetados

Dbd::Pg

Red Hat

Referências · 21

• https://security-tracker.debian.org/tracker/CVE-2009-1341 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1341 · Aviso do Fabricante
• http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes · Nota
• https://access.redhat.com/security/cve/CVE-2009-1341 · Nota
• http://securityfocus.com/bid/34757 · Nota
• https://launchpad.net/bugs/cve/2009-1341 · Nota
• https://access.redhat.com/errata/RHSA-2009:0479 · Nota
• https://osv.dev/vulnerability/CVE-2009-1341 · Aviso do Fabricante
• http://secunia.com/advisories/35058 · Aviso do Fabricante
• http://secunia.com/advisories/34909 · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2009-1067.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-1341 · Nota de Segurança
• http://redhat.com/support/errata/RHSA-2009-0479.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50387 · Nota
• https://access.redhat.com/security/cve/CVE-2009-0663 · Nota