Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ppisar

#50341of 53,624
4.7Total CVSS
Vulnerabilities · 1
PT-2020-6247
4.7
2020-02-24
Perl · Dbi · CVE-2019-20919
**Name of the Vulnerable Software and Affected Versions** DBI module versions prior to 1.643 for Perl **Description** An issue was discovered in the DBI module for Perl, where the code checks for NULL as required by the hv fetch() documentation, but then calls SvOK(profile), causing a NULL pointer dereference. This can lead to a denial of service. **Recommendations** For versions prior to 1.643, update to version 1.643 or later to resolve the issue. As a temporary workaround, consider disabling the `SvOK(profile)` function call until a patch is available. Restrict access to the `hv fetch()` function to minimize the risk of exploitation.