Количество 13
Количество 13
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 );
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv
CVE-2026-88815
DBI versions before 1.654 for Perl incorrectly treat numeric values as ...
RLSA-2026:77576
Important: perl-DBI security update
RLSA-2026:76762
Important: perl-DBI security update
RLSA-2026:76760
Important: perl-DBI security update
ELSA-2026-77576
ELSA-2026-77576: perl-DBI security update (IMPORTANT)
ELSA-2026-76762
ELSA-2026-76762: perl-DBI security update (IMPORTANT)
ELSA-2026-76760
ELSA-2026-76760: perl-DBI security update (IMPORTANT)
SUSE-SU-2026:4442-1
Security update for perl-DBI
SUSE-SU-2026:4612-1
Security update for perl-DBI
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 ); | CVSS3: 6.2 | 0% Низкий | 28 дней назад |
 | CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 ); | CVSS3: 7.5 | 0% Низкий | 28 дней назад |
 | CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv. When casting to SQL_NUMERIC, sql_type_cast_svpv passes the string pointer and length of the SV to grok_number without stringifying it first. An integer (IV) or floating-point (NV) value has no valid string pointer, so grok_number reads from an invalid address, triggering a segmentation fault. This is reachable in Perl using the sql_type_cast function: my $num = 42; DBI::sql_type_cast( $num, DBI::SQL_NUMERIC, 0 ); | CVSS3: 6.2 | 0% Низкий | 28 дней назад |
 | CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv | CVSS3: 6.2 | 0% Низкий | 26 дней назад |
| CVE-2026-88815 DBI versions before 1.654 for Perl incorrectly treat numeric values as ... | CVSS3: 6.2 | 0% Низкий | 28 дней назад |
 | RLSA-2026:77576 Important: perl-DBI security update | 0% Низкий | 19 дней назад | |
| RLSA-2026:76762 Important: perl-DBI security update | 0% Низкий | 19 дней назад | |
| RLSA-2026:76760 Important: perl-DBI security update | 0% Низкий | 18 дней назад | |
| ELSA-2026-77576 ELSA-2026-77576: perl-DBI security update (IMPORTANT) | 0% Низкий | 19 дней назад | |
| ELSA-2026-76762 ELSA-2026-76762: perl-DBI security update (IMPORTANT) | 0% Низкий | 21 день назад | |
| ELSA-2026-76760 ELSA-2026-76760: perl-DBI security update (IMPORTANT) | 0% Низкий | 20 дней назад | |
 | SUSE-SU-2026:4442-1 Security update for perl-DBI | 22 дня назад | ||
| SUSE-SU-2026:4612-1 Security update for perl-DBI | 17 дней назад |
Уязвимостей на страницу