{"id":"CVE-2014-10402","aliases":["ALPINE-CVE-2014-10402","AZL-41925","BELL-CVE-2014-10402","DEBIAN-CVE-2014-10402","DLA-3035-1","EUVD-2014-1173","GHSA-qc7v-jjp2-38r9","MGASA-2021-0451","OESA-2022-1641","SUSE-SU-2020:3384-1","SUSE-SU-2020:3385-1","SUSE-SU-2024:3136-1","UBUNTU-CVE-2014-10402","USN-5030-1","USN-5030-2","openSUSE-SU-2020:2051-1","openSUSE-SU-2020:2064-1","openSUSE-SU-2024:11161-1"],"status":"published","title":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open...","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00488,"percentile":0.4232,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-732"],"published":"2020-09-16T15:55:20Z","modified":"2026-10-23T16:01:11Z","fixes":[{"ecosystem":"Alpine:v3.15","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"perl-dbi","fixed_in":["1.643-r0"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"perl-DBI","fixed_in":["1.632-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libdbi-perl","fixed_in":["1.643-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libdbi-perl","fixed_in":["1.643-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libdbi-perl","fixed_in":["1.643-3"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"libdbi-perl","fixed_in":["1.636-1+deb9u2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"perl-DBI","fixed_in":["1.643.0-4.1.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"perl-DBI","fixed_in":["1.643-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"perl-DBI","fixed_in":["1.643-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"perl-DBI","fixed_in":["1.643-3.oe2203"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libdbi-perl","fixed_in":["1.634-1ubuntu0.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libdbi-perl","fixed_in":["1.640-1ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libdbi-perl","fixed_in":["1.643-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.15","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl-dbi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-r0"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.632-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-3"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.636-1+deb9u2"}]}],"versions":["1.636-1","1.636-1+deb9u1"]},{"source":"osv","ecosystem":"Mageia:8","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643.0-4.1.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-3.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.642-3.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.639-3.14.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.628-5.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.628-5.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.627-1","1.628-1","1.630-1","1.630-1ubuntu0.1~esm1","1.630-1ubuntu0.1~esm4","1.630-1ubuntu0.1~esm5","1.630-1ubuntu0.1~esm6","1.630-1ubuntu0.1~esm8","1.630-1ubuntu0.1~esm9"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.634-1ubuntu0.2+esm1"}]}],"versions":["1.633-1","1.634-1","1.634-1build1","1.634-1ubuntu0.1","1.634-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.640-1ubuntu0.3"}]}],"versions":["1.637-1","1.639-1","1.640-1","1.640-1ubuntu0.1","1.640-1ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-1ubuntu0.1"}]}],"versions":["1.642-1","1.642-1build1","1.643-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.640-1ubuntu0.3"}]}],"versions":["1.637-1","1.639-1","1.640-1","1.640-1ubuntu0.1","1.640-1ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-1ubuntu0.1"}]}],"versions":["1.642-1","1.642-1build1","1.643-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libdbi-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.634-1ubuntu0.2+esm1"}]}],"versions":["1.633-1","1.634-1","1.634-1build1","1.634-1ubuntu0.1","1.634-1ubuntu0.2"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.639-lp151.3.16.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.642-lp152.2.9.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl-DBI","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.643-2.7"}]}],"bundled":2}],"products":[{"vendor":"perl","product":"dbi"}],"references":[{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=99508#txn-1911590","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","advisory","evidence","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00046.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-10402","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-qc7v-jjp2-38r9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2014-10402","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2014-10402","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2014-10402","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0451.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29327","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5030-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1641","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203384-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1176492","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2014-10401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2014-10402","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20203385-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243136-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2014-10402","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5030-2","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-10402","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-14393","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GMGB54ZNHPYCQOCNFWII4FF7QYGHLHOE/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/43QNN7Q3HNDCS2NCHIGGBFFQET5XKUHO/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T15:55:20Z","modified":"2024-08-06T14:10:54.834Z","updated_at":"2026-11-02T14:33:42.219637Z"}],"euvd":[{"id":"EUVD-2014-1173","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T15:55:20Z","modified":"2024-08-06T14:10:54Z","updated_at":"2026-11-03T01:56:47.076958Z"}],"ghsa":[{"id":"GHSA-qc7v-jjp2-38r9","title":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open...","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2022-05-17T19:57:35Z","modified":"2023-01-28T05:05:04Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:44:17.523008Z"}],"nvd":[{"id":"CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:14.607Z","modified":"2026-06-17T00:04:15.197Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":3.6,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:P","level":"low","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:02:59.461996Z"}],"osv":[{"id":"ALPINE-CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:14.607Z","modified":"2026-10-23T15:17:40.783260719Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"AZL-41925","title":"CVE-2014-10402 affecting package perl-DBI for versions less than 1.632-1","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:14Z","modified":"2026-08-03T18:46:15Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:04.893995Z"},{"id":"BELL-CVE-2014-10402","title":"CVE-2014-10402 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:37.240571Z","modified":"2026-01-26T09:46:34.327118Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:14Z","modified":"2026-04-16T04:32:06.2964058Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:43:59.361892Z"},{"id":"DEBIAN-CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:14.607Z","modified":"2026-10-23T16:01:11.606084432Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:25.819707Z"},{"id":"OESA-2022-1641","title":"perl-DBI security update","description":"The DBI is the standard database interface module for Perl.It defines a set of methods, variables and conventions that providea consistent database interface independent of the actual database being used.It is important to remember that the DBI is just an interface.The DBI is a layer of \"glue\" between an application and one or more database driver modules.It is the driver modules which do most of the real work. The DBI provides a standard interface and framework for the drivers to operate within.\r\n\r\nSecurity Fix(es):\r\n\r\nAn issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.(CVE-2014-10402)","status":"published","published":"2022-05-11T11:04:55Z","modified":"2026-08-18T01:16:34.567787936Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2014-10402","description":"An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). NOTE: this issue exists because of an incomplete fix for CVE-2014-10401.","status":"published","published":"2020-09-16T16:15:00Z","modified":"2026-10-12T07:45:03.029366633Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:07.855521Z"},{"id":"DLA-3035-1","title":"libdbi-perl - security update","status":"published","published":"2022-05-30T00:00:00Z","modified":"2026-03-09T01:19:12.362476Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"MGASA-2021-0451","title":"Updated perl-DBI packages fix security vulnerability","description":"An issue was discovered in the DBI module through 1.643 for Perl.\nDBD::File drivers can open files from folders other than those\nspecifically passed via the f_dir attribute in the data source name (DSN).\n(CVE-2014-10402)\n","status":"published","published":"2021-10-02T18:57:04Z","modified":"2026-04-16T04:42:30.666212625Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2020:2051-1","title":"Security update for perl-DBI","description":"This update for perl-DBI fixes the following issues:\n\n- DBD::File drivers could open files from folders other than those specifically\n  passed via the f_dir attribute in the data source name (DSN). \n  [bsc#1176492, CVE-2014-10401, CVE-2014-10402]\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-11-26T17:28:05Z","modified":"2026-02-04T04:35:11.000103Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:2064-1","title":"Security update for perl-DBI","description":"This update for perl-DBI fixes the following issues:\n\n- DBD::File drivers can open files from folders other than those\n  specifically passed via the f_dir attribute in the data source\n  name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]\n\nThis update was imported from the SUSE:SLE-15-SP2:Update update project.","status":"published","published":"2020-11-27T05:23:54Z","modified":"2026-02-04T02:44:13.609959Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:11161-1","title":"perl-DBI-1.643-2.7 on GA media","description":"These are all security issues fixed in the perl-DBI-1.643-2.7 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:36:39.423505Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2020:3384-1","title":"Security update for perl-DBI","description":"This update for perl-DBI fixes the following issues:\n\n- DBD::File drivers can open files from folders other than those\n  specifically passed via the f_dir attribute in the data source\n  name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402]\n","status":"published","published":"2020-11-19T10:33:57Z","modified":"2026-02-04T04:21:07.961205Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2020:3385-1","title":"Security update for perl-DBI","description":"This update for perl-DBI fixes the following issues:\n\n- DBD::File drivers could open files from folders other than those specifically\n  passed via the f_dir attribute in the data source name (DSN). \n  [bsc#1176492, CVE-2014-10401, CVE-2014-10402]\n","status":"published","published":"2020-11-19T10:34:27Z","modified":"2025-05-02T04:29:36.718776Z","updated_at":"2026-11-02T15:53:48.11786Z"},{"id":"SUSE-SU-2024:3136-1","title":"Security update for perl-DBI","description":"This update for perl-DBI fixes the following issues:\n\n  - CVE-2014-10401: Fixed incorrect permission on opening files via DBD::File drivers (bsc#1176492)\n  - CVE-2014-10402: Fixed incorrect permission on opening files via DBD::File drivers (bsc#1176492)\n","status":"published","published":"2024-09-04T06:52:40Z","modified":"2026-02-04T02:35:34.917244Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-5030-1","title":"libdbi-perl vulnerabilities","description":"It was discovered that the Perl DBI module incorrectly opened files outside\nof the folder specified in the data source name. A remote attacker could\npossibly use this issue to obtain sensitive information. (CVE-2014-10402)\n\nIt was discovered that the Perl DBI module incorrectly handled certain long\nstrings. A local attacker could possibly use this issue to cause the DBI\nmodule to crash, resulting in a denial of service. This issue only affected\nUbuntu 18.04 LTS. (CVE-2020-14393)\n","status":"published","published":"2021-08-04T11:08:11Z","modified":"2026-04-27T15:55:55.422806Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-5030-2","title":"libdbi-perl vulnerabilities","description":"\nUSN-5030-1 addressed vulnerabilities in Perl DBI module. This \nupdate provides the corresponding updates for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that the Perl DBI module incorrectly opened files outside\n of the folder specified in the data source name. A remote attacker could\n possibly use this issue to obtain sensitive information. (CVE-2014-10402)\n \n It was discovered that the Perl DBI module incorrectly handled certain long\n strings. A local attacker could possibly use this issue to cause the DBI\n module to crash, resulting in a denial of service. (CVE-2020-14393)\n\n","status":"published","published":"2022-02-03T16:54:49Z","modified":"2026-06-25T13:30:42.240422712Z","updated_at":"2026-11-02T16:58:15.683829Z"}]}}