DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders. The preparse method expands SQL placeholder characters to numbered binders of the form :pN, but only allocates three characters per binder in the buffer. Placeholders 10-99 require four characters, 100-999 require five characters, et cetera.
| Vendor | Product | Versions |
|---|---|---|
| perl | dbi | 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| red hat | enterprise linux | cert_advisory | 90% |
Updated severity to HIGH and added CVSS estimate of 7.5 along with a new tag for the CVE ID.
Updated severity to CRITICAL, added affected version 1.647, and corrected exploit availability.
Initial creation
