Every CVE Search/ Get API key

CVE-2014-10401

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files...

6.1 MediumFix available

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
Low

Exploit likelihood

0.44%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.1

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
CVE-2014-10401
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:P/I:N/A:P
Weakness
CWE-732
Updated
2026-11-02
CVE List No score

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
CVE-2014-10401
Updated
2026-11-02
EUVDEUVD-2014-1172 No score

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
EUVD-2014-1172
Updated
2026-11-03
GitHub AdvisoriesGHSA-9347-cf5g-8j34 No score

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files...

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
GHSA-9347-cf5g-8j34
Updated
2026-11-02
OSV 6.1

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
CVE-2014-10401
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Updated
2026-11-02
OSVDEBIAN-CVE-2014-10401 6.1

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
DEBIAN-CVE-2014-10401
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Updated
2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2014-10401 6.1

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.

Record
UBUNTU-CVE-2014-10401
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Updated
2026-11-02
OSVopenSUSE-SU-2020:2051-1 No score

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • DBD::File drivers could open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:2051-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:2064-1 No score

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Record
openSUSE-SU-2020:2064-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11161-1 No score

perl-DBI-1.643-2.7 on GA media

These are all security issues fixed in the perl-DBI-1.643-2.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11161-1
Updated
2026-11-02
OSVSUSE-SU-2020:3384-1 No score

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]
Record
SUSE-SU-2020:3384-1
Updated
2026-11-02
OSVSUSE-SU-2020:3385-1 No score

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • DBD::File drivers could open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]
Record
SUSE-SU-2020:3385-1
Updated
2026-11-02
OSVSUSE-SU-2024:3136-1 No score

Security update for perl-DBI

This update for perl-DBI fixes the following issues:

  • CVE-2014-10401: Fixed incorrect permission on opening files via DBD::File drivers (bsc#1176492)
  • CVE-2014-10402: Fixed incorrect permission on opening files via DBD::File drivers (bsc#1176492)
Record
SUSE-SU-2024:3136-1
Updated
2026-11-02
OSVUSN-4509-1 No score

libdbi-perl vulnerabilities

It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2013-7490)

It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information. (CVE-2014-10401)

Record
USN-4509-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libdbi-perl
Debian:12
 before 1.633-1
1.633-1
libdbi-perl
Debian:13
 before 1.633-1
1.633-1
libdbi-perl
Debian:14
 before 1.633-1
1.633-1
perl-DBI
SUSE:Linux Enterprise Module for Basesystem 15 SP2
From an advisory covering 2 CVEs
 before 1.642-3.9.1
1.642-3.9.1
perl-DBI
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 2 CVEs
 before 1.639-3.14.1
1.639-3.14.1
perl-DBI
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 2 CVEs
 before 1.628-5.9.1
1.628-5.9.1
perl-DBI
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 2 CVEs
 before 1.628-5.9.1
1.628-5.9.1
libdbi-perl
Ubuntu:Pro:14.04:LTS
 before 1.630-1ubuntu0.1~esm4, plus listed versions
1.627-11.628-11.630-11.630-1ubuntu0.1~esm1
1.630-1ubuntu0.1~esm4
libdbi-perl
Ubuntu:Pro:14.04:LTS
From an advisory covering 2 CVEs
 before 1.630-1ubuntu0.1~esm4, plus listed versions
1.627-11.628-11.630-11.630-1ubuntu0.1~esm1
1.630-1ubuntu0.1~esm4
perl-DBI
openSUSE:Leap 15.1
From an advisory covering 2 CVEs
 before 1.639-lp151.3.16.1
1.639-lp151.3.16.1
perl-DBI
openSUSE:Leap 15.2
From an advisory covering 2 CVEs
 before 1.642-lp152.2.9.1
1.642-lp152.2.9.1
perl-DBI
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 1.643-2.7
1.643-2.7

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-10401 is a medium vulnerability (CVSS 6.1) in Perl Dbi, published September 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in libdbi-perl 1.633-1.

References

Show 13 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open