Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c7xw-cj86-m724

Опубликовано: 05 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.

The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders.

The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

EPSS

Процентиль: 39%
0.00485
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
около 2 месяцев назад

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

CVSS3: 7.7
redhat
около 2 месяцев назад

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

CVSS3: 9.8
nvd
около 2 месяцев назад

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.

CVSS3: 8.6
msrc
около 2 месяцев назад

DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders

CVSS3: 9.8
debian
около 2 месяцев назад

DBI versions before 1.648 for Perl have a heap overflow when preparsin ...

EPSS

Процентиль: 39%
0.00485
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787