CVE-2009-1341
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...
5.0 MediumFix available
CVE-2009-1341 is a medium vulnerability (CVSS 5.0) in Debian Libdbd-pg-perl, published April 28, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.97%, the 80th percentile. Fixed in libdbd-pg-perl 2.1.3-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.97%EPSS, 80th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2.1.3-1libdbd-pg-perl +66 more
Description
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
Exploit likelihood
1.97%Down 0.7 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libdbd-pg-perlDebian:12 | before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:13 | before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:14 | before 2.1.3-1 | 2.1.3-1 |
libdbd-pg-perlDebian:4.0 From an advisory covering 2 CVEs | before 1.49-2+etch1, plus listed versions 1.49-2 | 1.49-2+etch1 |
perl-DBD-PgRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-Pg-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 2 CVEs | before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-PgRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
perl-DBD-Pg-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 2 CVEs | before 0:1.49-2.el5_3.1 | 0:1.49-2.el5_3.1 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
Show 57 moreShow less
| Package | Affected | Fixed |
|---|---|---|
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:2.2.11-2.el5s2 | 0:2.2.11-2.el5s2 |
mod_jkRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_jk-ap20Red Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_jk-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:1.2.28-2.el5s2 | 0:1.2.28-2.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 1:2.2.11-2.el5s2 | 1:2.2.11-2.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:3.51.27r695-1.el5s2 | 0:3.51.27r695-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:3.51.27r695-1.el5s2 | 0:3.51.27r695-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.0.79-2.el5s2 | 0:5.0.79-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:4.010-1.el5s2 | 0:4.010-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:4.010-1.el5s2 | 0:4.010-1.el5s2 |
perl-DBD-PgRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:1.49-5.el5s2 | 0:1.49-5.el5s2 |
perl-DBD-Pg-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:1.49-5.el5s2 | 0:1.49-5.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:5.2.9-2.el5s2 | 0:5.2.9-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.509-2jpp.el5s2 | 0:8.2.509-2jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.509-2jpp.el5s2 | 0:8.2.509-2jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.2.13-2.el5s2 | 0:8.2.13-2.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.1.17-1.el5s2 | 0:8.1.17-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs | before 0:8.1.17-1.el5s2 | 0:8.1.17-1.el5s2 |
What each source reports
NVD Score used
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE ListNo score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- Updated
- 2026-11-02
EUVDEUVD-2009-1339No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
EUVD-2009-1339- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h446-mfq3-hx7gNo score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl...
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
GHSA-h446-mfq3-hx7g- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVNo score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
CVE-2009-1341- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1341No score
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
- Record
DEBIAN-CVE-2009-1341- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2009-1067.html
securityfocus.com/bid/34757
security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
launchpad.net/bugs/cve/2009-1341
secunia.com/advisories/34909
Show 35 moreShow less
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680
cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
debian.org/security/2009/dsa-1780
lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
rt.cpan.org/Public/Bug/Display.html?id=21392
exchange.xforce.ibmcloud.com/vulnerabilities/50387
nvd.nist.gov/vuln/detail/CVE-2009-1341
github.com/advisories/GHSA-h446-mfq3-hx7g
security-tracker.debian.org/tracker/CVE-2009-1341
access.redhat.com/errata/RHSA-2009:0479
bugzilla.redhat.com/show_bug.cgi?id=497367
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0479.json
cve.org/CVERecord?id=CVE-2009-0663