Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2012-1151

Опубликовано: 27 фев. 2012
Источник: redhat
CVSS2: 5.1
EPSS Низкий

Описание

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Application Stack v2 for Enterprise Linuxperl-DBD-PgAffected
Red Hat Enterprise Linux 5perl-DBD-PgFixedRHSA-2012:111625.07.2012
Red Hat Enterprise Linux 6perl-DBD-PgFixedRHSA-2012:111625.07.2012

Показывать по

Дополнительная информация

Статус:

Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=801733perl-DBD-Pg: Format string flaws by turning db notices into Perl warnings and by preparing DBD statement

EPSS

Процентиль: 85%
0.02485
Низкий

5.1 Medium

CVSS2

Связанные уязвимости

ubuntu
больше 13 лет назад

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

nvd
больше 13 лет назад

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

debian
больше 13 лет назад

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD ...

github
больше 3 лет назад

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

oracle-oval
больше 13 лет назад

ELSA-2012-1116: perl-DBD-Pg security update (MODERATE)

EPSS

Процентиль: 85%
0.02485
Низкий

5.1 Medium

CVSS2