PT-2009-3871 · Perl+1 · Dbd::Pg+1

Published 2009-04-30 · Updated 2017-09-29 · CVE-2009-1341

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions DBD::Pg versions prior to 2.0.0

Description The issue is related to a memory leak in the dequote bytea function, which can be exploited by context-dependent attackers to cause a denial of service through excessive memory consumption. This can be achieved by fetching data that includes BYTEA columns.

Recommendations For versions prior to 2.0.0, update to version 2.0.0 or later to resolve the issue.

Fix

DoS

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2009-1341

DSA-1780-1

RHSA-2009:0479

RHSA-2009:1067

RHSA-2009_0479

Affected Products

Dbd::Pg

Red Hat

References · 21

• https://security-tracker.debian.org/tracker/CVE-2009-1341 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-1341 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-1341 · Vendor Advisory
• http://secunia.com/advisories/35058 · Vendor Advisory
• http://secunia.com/advisories/34909 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2009-1067.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-1341 · Security Note
• http://redhat.com/support/errata/RHSA-2009-0479.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html · Vendor Advisory
• http://debian.org/security/2009/dsa-1780 · Vendor Advisory
• http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes · Note
• https://access.redhat.com/security/cve/CVE-2009-1341 · Note
• http://securityfocus.com/bid/34757 · Note
• https://launchpad.net/bugs/cve/2009-1341 · Note
• https://access.redhat.com/errata/RHSA-2009:0479 · Note