perl-DBI vulnerabilities (Azure Linux)
17 vulnerabilities.
-
perl-DBIAzure Linux DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock 6.5 Medium -
perl-DBIAzure Linux DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element 2.9 Low -
perl-DBIAzure Linux DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv 6.2 Medium -
perl-DBIAzure Linux DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName 7.5 High -
perl-DBIAzure Linux DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM 9.8 Critical -
perl-DBIAzure Linux DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse 9.1 Critical -
perl-DBIAzure Linux DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse 9.8 Critical -
perl-DBIAzure Linux DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row 9.1 Critical -
perl-DBIAzure Linux DBI::ProfileData versions before 1.651 for Perl do not limit the path index 7.5 High -
perl-DBIAzure Linux DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location 7.7 High -
perl-DBIAzure Linux DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text 9.8 Critical -
perl-DBIAzure Linux DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment 9.1 Critical -
perl-DBIAzure Linux DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders 9.8 Critical -
perl-DBIAzure Linux DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile 8.8 High -
perl-DBIAzure Linux DBI versions before 1.648 for Perl saved errors in a limited-sized buffer 9.8 Critical -
perl-DBIAzure Linux DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders 9.8 Critical -
perl-DBIAzure Linux An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open... 6.1 Medium