SB2020091737 - Ubuntu update for libdbi-perl

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2020091737

SB2020091737 - Ubuntu update for libdbi-perl

Published: September 17, 2020 Updated: April 23, 2025

Security Bulletin ID SB2020091737
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Information disclosure

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Buffer overflow (CVE-ID: CVE-2013-7490)

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.


2) Incorrect permission assignment for critical resource (CVE-ID: CVE-2014-10401)

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.


Remediation

Install update from vendor's website.

References