Perl · Dbi · CVE-2019-20919
**Name of the Vulnerable Software and Affected Versions**
DBI module versions prior to 1.643 for Perl
**Description**
An issue was discovered in the DBI module for Perl, where the code checks for NULL as required by the hv fetch() documentation, but then calls SvOK(profile), causing a NULL pointer dereference. This can lead to a denial of service.
**Recommendations**
For versions prior to 1.643, update to version 1.643 or later to resolve the issue. As a temporary workaround, consider disabling the `SvOK(profile)` function call until a patch is available. Restrict access to the `hv fetch()` function to minimize the risk of exploitation.