CVE-2013-7490
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods...
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
CVE-2013-7490- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
CVE-2013-7490- Updated
- 2026-11-02
EUVDEUVD-2013-7247 No score
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
EUVD-2013-7247- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g483-mcjg-g334
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods...
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
GHSA-g483-mcjg-g334- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
OSV
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
CVE-2013-7490- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVDEBIAN-CVE-2013-7490
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
DEBIAN-CVE-2013-7490- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 4 moreShow less
OSVUBUNTU-CVE-2013-7490
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
- Record
UBUNTU-CVE-2013-7490- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVSUSE-SU-2020:14510-1 No score
Security update for perl-DBI
This update for perl-DBI fixes the following issues:
- CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764).
- CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing (bsc#1176496).
- CVE-2013-7491: Fixed a stack corruption when a user-defined function required a non-trivial amount of memory (bsc#1176493).
- Record
SUSE-SU-2020:14510-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2856-1 No score
Security update for perl-DBI
This update for perl-DBI fixes the following issues:
- CVE-2019-20919: Fixed a NULL profile dereference in dbi_profile (bsc#1176764).
- CVE-2013-7490: Fixed memory corruption when using many arguments to methods for CallbacksUsing (bsc#1176496).
- Record
SUSE-SU-2020:2856-1- Updated
- 2026-11-02
OSVUSN-4509-1 No score
libdbi-perl vulnerabilities
It was discovered that Perl DBI module incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2013-7490)
It was discovered that Perl DBI module incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information. (CVE-2014-10401)
- Record
USN-4509-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libdbi-perlDebian:12 |
before 1.633-1 | 1.633-1 |
libdbi-perlDebian:13 |
before 1.633-1 | 1.633-1 |
libdbi-perlDebian:14 |
before 1.633-1 | 1.633-1 |
perl-DBISUSE:Linux Enterprise Point of Sale 11 SP3 From an advisory covering 3 CVEs |
before 1.607-3.6.1 | 1.607-3.6.1 |
perl-DBISUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 3 CVEs |
before 1.607-3.6.1 | 1.607-3.6.1 |
perl-DBISUSE:HPE Helion OpenStack 8 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:OpenStack Cloud 7 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:OpenStack Cloud 8 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:OpenStack Cloud 9 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:OpenStack Cloud Crowbar 8 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-DBISUSE:OpenStack Cloud Crowbar 9 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server 12 SP5 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
perl-DBISUSE:Enterprise Storage 5 From an advisory covering 2 CVEs |
before 1.628-5.6.1 | 1.628-5.6.1 |
libdbi-perlUbuntu:Pro:14.04:LTS |
before 1.630-1ubuntu0.1~esm4, plus listed versions 1.627-11.628-11.630-11.630-1ubuntu0.1~esm1 |
1.630-1ubuntu0.1~esm4 |
libdbi-perlUbuntu:Pro:14.04:LTS From an advisory covering 2 CVEs |
before 1.630-1ubuntu0.1~esm4, plus listed versions 1.627-11.628-11.630-11.630-1ubuntu0.1~esm1 |
1.630-1ubuntu0.1~esm4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2013-7490 is a medium vulnerability (CVSS 5.3) in Perl Dbi, published September 11, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.74%, the 86th percentile. Fixed in libdbi-perl 1.633-1.
References
metacpan.org/pod/distribution/DBI/Changes
github.com/perl5-dbi/dbi/commit/a8b98e988d6ea2946f5f56691d6d5ead53f65766
rt.cpan.org/Public/Bug/Display.html?id=86744
usn.ubuntu.com/4509-1
nvd.nist.gov/vuln/detail/CVE-2013-7490
Show 13 moreShow less
security-tracker.debian.org/tracker/CVE-2013-7490
suse.com/support/update/announcement/2020/suse-su-202014510-1
bugzilla.suse.com/1176493
ubuntu.com/security/CVE-2013-7490
cve.org/CVERecord?id=CVE-2013-7490