CVE-2009-1341
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...
CVE-2009-1341 is a medium vulnerability (CVSS 5.0) in Debian Libdbd-pg-perl, published April 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in libdbd-pg-perl 2.1.3-1.
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
Exploit likelihood
What each source reports
NVD Score used
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- Updated
- 2026-11-02
EUVDEUVD-2009-1339 No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
EUVD-2009-1339- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h446-mfq3-hx7g No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
GHSA-h446-mfq3-hx7g- Weakness
- CWE-200
- Updated
- 2026-11-02
OSV No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1341 No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
DEBIAN-CVE-2009-1341- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libdbd-pg-perlDebian:12 |
before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:13 |
before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:14 |
before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:4.0 |
before 1.49-2+etch1, plus listed versions 1.49-2 |
1.49-2+etch1 |
perl-DBD-PgRed Hat:enterprise_linux:5::client |
before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-Pg-debuginfoRed Hat:enterprise_linux:5::client |
before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-PgRed Hat:enterprise_linux:5::server |
before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-Pg-debuginfoRed Hat:enterprise_linux:5::server |
before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
httpdRed Hat:rhel_application_stack:2 |
before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 |
before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
httpd-develRed Hat:rhel_application_stack:2 |
before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 |
before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
mod_jkRed Hat:rhel_application_stack:2 |
before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_jk-ap20Red Hat:rhel_application_stack:2 |
before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_jk-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 |
before 1:2.2.11-2.el5s2 | 1:2.2.11-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 |
before 0:3.51.27r695-1.el5s2 | 0:3.51.27r695-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:3.51.27r695-1.el5s2 | 0:3.51.27r695-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 |
before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 |
before 0:4.010-1.el5s2 | 0:4.010-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 |
before 0:4.010-1.el5s2 | 0:4.010-1.el5s2 |
perl-DBD-PgRed Hat:rhel_application_stack:2 |
before 0:1.49-5.el5s2 | 0:1.49-5.el5s2 |
perl-DBD-Pg-debuginfoRed Hat:rhel_application_stack:2 |
before 0:1.49-5.el5s2 | 0:1.49-5.el5s2 |
phpRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-cliRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-commonRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-develRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-gdRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-imapRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-soapRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 |
before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 |
before 0:8.2.509-2jpp.el5s2 | 0:8.2.509-2jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.2.509-2jpp.el5s2 | 0:8.2.509-2jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 |
before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 |
before 0:8.1.17-1.el5s2 | 0:8.1.17-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 |
before 0:8.1.17-1.el5s2 | 0:8.1.17-1.el5s2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
redhat.com/support/errata/RHSA-2009-1067.html
securityfocus.com/bid/34757
security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
launchpad.net/bugs/cve/2009-1341
secunia.com/advisories/34909
Show 35 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680
cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
debian.org/security/2009/dsa-1780
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
rt.cpan.org/Public/Bug/Display.html?id=21392
exchange.xforce.ibmcloud.com/vulnerabilities/50387
nvd.nist.gov/vuln/detail/CVE-2009-1341
github.com/advisories/GHSA-h446-mfq3-hx7g
security-tracker.debian.org/tracker/CVE-2009-1341
access.redhat.com/errata/RHSA-2009:0479
bugzilla.redhat.com/show_bug.cgi?id=497367
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0479.json
cve.org/CVERecord?id=CVE-2009-0663