Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-14393

Опубликовано: 16 сент. 2020
Источник: nvd
CVSS3: 7.1
CVSS2: 3.6
EPSS Низкий

Описание

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:perl:database_interface:*:*:*:*:*:*:*:*
Версия до 1.643 (исключая)
Конфигурация 2
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Конфигурация 3

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 32%
0.00123
Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 5 лет назад

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

CVSS3: 7.1
redhat
больше 6 лет назад

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

CVSS3: 7.1
debian
больше 5 лет назад

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local att ...

CVSS3: 7.1
github
больше 3 лет назад

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

CVSS3: 7.1
fstec
больше 5 лет назад

Уязвимость компонента DBI интерпретатора языка программирования Perl, связанная с записью за границами буфера, позволяющая нарушителю нарушить целостность данных, а также вызвать отказ в обслуживании

EPSS

Процентиль: 32%
0.00123
Низкий

7.1 High

CVSS3

3.6 Low

CVSS2

Дефекты

CWE-121
CWE-787