CVE-2013-7491
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a...
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
CVE-2013-7491- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
CVE-2013-7491- Updated
- 2026-11-02
EUVDEUVD-2013-7248 No score
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
EUVD-2013-7248- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-grmf-5xw5-9cmx No score
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a...
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
GHSA-grmf-5xw5-9cmx- Updated
- 2026-11-02
OSV
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
CVE-2013-7491- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7491
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
DEBIAN-CVE-2013-7491- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2013-7491
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
- Record
UBUNTU-CVE-2013-7491- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVSUSE-SU-2020:14510-1 No score
Security update for perl-DBI
This update for perl-DBI fixes the following issues:
- CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764).
- CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing (bsc#1176496).
- CVE-2013-7491: Fixed a stack corruption when a user-defined function required a non-trivial amount of memory (bsc#1176493).
- Record
SUSE-SU-2020:14510-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libdbi-perlDebian:12 |
before 1.628-1 | 1.628-1 |
libdbi-perlDebian:13 |
before 1.628-1 | 1.628-1 |
libdbi-perlDebian:14 |
before 1.628-1 | 1.628-1 |
perl-DBISUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 3 CVEs |
before 1.607-3.6.1 | 1.607-3.6.1 |
perl-DBISUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 3 CVEs |
before 1.607-3.6.1 | 1.607-3.6.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7491 is a medium vulnerability (CVSS 5.3) in Perl Dbi, published September 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.66%, the 85th percentile. Fixed in libdbi-perl 1.628-1.
References
rt.cpan.org/Public/Bug/Display.html?id=85562
github.com/perl5-dbi/dbi/commit/401f1221311c71f760e21c98772f0f7e3cbead1d
metacpan.org/pod/distribution/DBI/Changes
nvd.nist.gov/vuln/detail/CVE-2013-7491
security-tracker.debian.org/tracker/CVE-2013-7491
Show 9 moreShow less
suse.com/support/update/announcement/2020/suse-su-202014510-1
bugzilla.suse.com/1176493
ubuntu.com/security/CVE-2013-7491
cve.org/CVERecord?id=CVE-2013-7491