PT-2020-6256 · Perl+3 · Perl-Dbi+3
Pedro Sampaio
·
Published
2020-02-24
·
Updated
2024-06-21
·
CVE-2020-14392
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Perl-DBI versions prior to 1.643
Description
The issue is related to an untrusted pointer dereference flaw in the dbd db login6 sv() function, which can cause memory corruption. This could allow a local attacker to manipulate calls to this function, potentially affecting the service's availability. The flaw is also described as a buffer overflow in memory, which could be exploited to cause a denial of service.
Recommendations
For versions prior to 1.643, update to version 1.643 or later to resolve the issue. As a temporary workaround, consider restricting access to the dbd db login6 sv() function to minimize the risk of exploitation.
Fix
Untrusted Pointer Dereference
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Perl-Dbi
Suse
Ubuntu