Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Partial
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-134 and the CVSS impact.
Summary
Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 120
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* | up to 2.18.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.1:*:*:*:*:*:*:* | 0.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.2:*:*:*:*:*:*:* | 0.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.3:*:*:*:*:*:*:* | 0.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.4:*:*:*:*:*:*:* | 0.4 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.5:*:*:*:*:*:*:* | 0.5 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.52:*:*:*:*:*:*:* | 0.52 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.61:*:*:*:*:*:*:* | 0.61 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.62:*:*:*:*:*:*:* | 0.62 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.63:*:*:*:*:*:*:* | 0.63 | Vulnerable | Perl |
- cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* Versions up to 2.18.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.1:*:*:*:*:*:*:* Versions 0.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.2:*:*:*:*:*:*:* Versions 0.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.3:*:*:*:*:*:*:* Versions 0.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.4:*:*:*:*:*:*:* Versions 0.4 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.5:*:*:*:*:*:*:* Versions 0.5 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.61:*:*:*:*:*:*:* Versions 0.61 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.62:*:*:*:*:*:*:* Versions 0.62 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.63:*:*:*:*:*:*:* Versions 0.63 Vulnerable ·Perl
Show 110 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:perl:perl:0.64:*:*:*:*:*:*:* | 0.64 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.65:*:*:*:*:*:*:* | 0.65 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.66:*:*:*:*:*:*:* | 0.66 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.67:*:*:*:*:*:*:* | 0.67 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.68:*:*:*:*:*:*:* | 0.68 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.69:*:*:*:*:*:*:* | 0.69 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.70:*:*:*:*:*:*:* | 0.70 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.71:*:*:*:*:*:*:* | 0.71 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.72:*:*:*:*:*:*:* | 0.72 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.73:*:*:*:*:*:*:* | 0.73 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.80:*:*:*:*:*:*:* | 0.80 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.81:*:*:*:*:*:*:* | 0.81 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.82:*:*:*:*:*:*:* | 0.82 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.83:*:*:*:*:*:*:* | 0.83 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.84:*:*:*:*:*:*:* | 0.84 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.85:*:*:*:*:*:*:* | 0.85 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.86:*:*:*:*:*:*:* | 0.86 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.87:*:*:*:*:*:*:* | 0.87 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.88:*:*:*:*:*:*:* | 0.88 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.89:*:*:*:*:*:*:* | 0.89 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.90:*:*:*:*:*:*:* | 0.90 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.91:*:*:*:*:*:*:* | 0.91 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.92:*:*:*:*:*:*:* | 0.92 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.93:*:*:*:*:*:*:* | 0.93 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.94:*:*:*:*:*:*:* | 0.94 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.95:*:*:*:*:*:*:* | 0.95 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.96:*:*:*:*:*:*:* | 0.96 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.97:*:*:*:*:*:*:* | 0.97 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.98:*:*:*:*:*:*:* | 0.98 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:0.99:*:*:*:*:*:*:* | 0.99 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.00:*:*:*:*:*:*:* | 1.00 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.01:*:*:*:*:*:*:* | 1.01 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.20:*:*:*:*:*:*:* | 1.20 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.21:*:*:*:*:*:*:* | 1.21 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.22:*:*:*:*:*:*:* | 1.22 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.31:*:*:*:*:*:*:* | 1.31 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.32:*:*:*:*:*:*:* | 1.32 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.40:*:*:*:*:*:*:* | 1.40 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.41:*:*:*:*:*:*:* | 1.41 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.42:*:*:*:*:*:*:* | 1.42 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.43:*:*:*:*:*:*:* | 1.43 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.44:*:*:*:*:*:*:* | 1.44 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.45:*:*:*:*:*:*:* | 1.45 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.46:*:*:*:*:*:*:* | 1.46 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.47:*:*:*:*:*:*:* | 1.47 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.48:*:*:*:*:*:*:* | 1.48 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:1.49:*:*:*:*:*:*:* | 1.49 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.0.0:*:*:*:*:*:*:* | 2.0.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.1.0:*:*:*:*:*:*:* | 2.1.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.1.1:*:*:*:*:*:*:* | 2.1.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.1.2:*:*:*:*:*:*:* | 2.1.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.1.3:*:*:*:*:*:*:* | 2.1.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.2.0:*:*:*:*:*:*:* | 2.2.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.2.1:*:*:*:*:*:*:* | 2.2.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.2.2:*:*:*:*:*:*:* | 2.2.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.3.0:*:*:*:*:*:*:* | 2.3.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.4.0:*:*:*:*:*:*:* | 2.4.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.5.0:*:*:*:*:*:*:* | 2.5.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.5.1:*:*:*:*:*:*:* | 2.5.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.0:*:*:*:*:*:*:* | 2.6.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.1:*:*:*:*:*:*:* | 2.6.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.2:*:*:*:*:*:*:* | 2.6.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.3:*:*:*:*:*:*:* | 2.6.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.4:*:*:*:*:*:*:* | 2.6.4 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.5:*:*:*:*:*:*:* | 2.6.5 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.6.6:*:*:*:*:*:*:* | 2.6.6 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.7.0:*:*:*:*:*:*:* | 2.7.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.7.2:*:*:*:*:*:*:* | 2.7.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.0:*:*:*:*:*:*:* | 2.8.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.1:*:*:*:*:*:*:* | 2.8.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.2:*:*:*:*:*:*:* | 2.8.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.3:*:*:*:*:*:*:* | 2.8.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.4:*:*:*:*:*:*:* | 2.8.4 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.5:*:*:*:*:*:*:* | 2.8.5 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.6:*:*:*:*:*:*:* | 2.8.6 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.7:*:*:*:*:*:*:* | 2.8.7 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.8.8:*:*:*:*:*:*:* | 2.8.8 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.9.0:*:*:*:*:*:*:* | 2.9.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.9.1:*:*:*:*:*:*:* | 2.9.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.9.2:*:*:*:*:*:*:* | 2.9.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.0:*:*:*:*:*:*:* | 2.10.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.1:*:*:*:*:*:*:* | 2.10.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.2:*:*:*:*:*:*:* | 2.10.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.3:*:*:*:*:*:*:* | 2.10.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.4:*:*:*:*:*:*:* | 2.10.4 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.5:*:*:*:*:*:*:* | 2.10.5 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.6:*:*:*:*:*:*:* | 2.10.6 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.10.7:*:*:*:*:*:*:* | 2.10.7 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.0:*:*:*:*:*:*:* | 2.11.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.1:*:*:*:*:*:*:* | 2.11.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.2:*:*:*:*:*:*:* | 2.11.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.3:*:*:*:*:*:*:* | 2.11.3 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.4:*:*:*:*:*:*:* | 2.11.4 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.5:*:*:*:*:*:*:* | 2.11.5 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.6:*:*:*:*:*:*:* | 2.11.6 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.7:*:*:*:*:*:*:* | 2.11.7 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.11.8:*:*:*:*:*:*:* | 2.11.8 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.12.0:*:*:*:*:*:*:* | 2.12.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.13.0:*:*:*:*:*:*:* | 2.13.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.14.0:*:*:*:*:*:*:* | 2.14.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.14.1:*:*:*:*:*:*:* | 2.14.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.15.0:*:*:*:*:*:*:* | 2.15.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.15.1:*:*:*:*:*:*:* | 2.15.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.16.0:*:*:*:*:*:*:* | 2.16.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.16.1:*:*:*:*:*:*:* | 2.16.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.17.0:*:*:*:*:*:*:* | 2.17.0 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.17.1:*:*:*:*:*:*:* | 2.17.1 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.17.2:*:*:*:*:*:*:* | 2.17.2 | Vulnerable | Perl |
| cpe:2.3:a:perl:perl:2.18.0:*:*:*:*:*:*:* | 2.18.0 | Vulnerable | Perl |
- cpe:2.3:a:perl:perl:0.64:*:*:*:*:*:*:* Versions 0.64 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.65:*:*:*:*:*:*:* Versions 0.65 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.66:*:*:*:*:*:*:* Versions 0.66 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.67:*:*:*:*:*:*:* Versions 0.67 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.68:*:*:*:*:*:*:* Versions 0.68 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.69:*:*:*:*:*:*:* Versions 0.69 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.70:*:*:*:*:*:*:* Versions 0.70 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.71:*:*:*:*:*:*:* Versions 0.71 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.72:*:*:*:*:*:*:* Versions 0.72 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.73:*:*:*:*:*:*:* Versions 0.73 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.80:*:*:*:*:*:*:* Versions 0.80 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.81:*:*:*:*:*:*:* Versions 0.81 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.82:*:*:*:*:*:*:* Versions 0.82 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.83:*:*:*:*:*:*:* Versions 0.83 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.84:*:*:*:*:*:*:* Versions 0.84 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.85:*:*:*:*:*:*:* Versions 0.85 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.86:*:*:*:*:*:*:* Versions 0.86 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.87:*:*:*:*:*:*:* Versions 0.87 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.88:*:*:*:*:*:*:* Versions 0.88 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.89:*:*:*:*:*:*:* Versions 0.89 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.90:*:*:*:*:*:*:* Versions 0.90 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.91:*:*:*:*:*:*:* Versions 0.91 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.92:*:*:*:*:*:*:* Versions 0.92 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.93:*:*:*:*:*:*:* Versions 0.93 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.94:*:*:*:*:*:*:* Versions 0.94 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.95:*:*:*:*:*:*:* Versions 0.95 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.96:*:*:*:*:*:*:* Versions 0.96 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.97:*:*:*:*:*:*:* Versions 0.97 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.98:*:*:*:*:*:*:* Versions 0.98 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.00:*:*:*:*:*:*:* Versions 1.00 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.01:*:*:*:*:*:*:* Versions 1.01 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.20:*:*:*:*:*:*:* Versions 1.20 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.21:*:*:*:*:*:*:* Versions 1.21 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.22:*:*:*:*:*:*:* Versions 1.22 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.31:*:*:*:*:*:*:* Versions 1.31 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.32:*:*:*:*:*:*:* Versions 1.32 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.40:*:*:*:*:*:*:* Versions 1.40 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.41:*:*:*:*:*:*:* Versions 1.41 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.42:*:*:*:*:*:*:* Versions 1.42 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.43:*:*:*:*:*:*:* Versions 1.43 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.44:*:*:*:*:*:*:* Versions 1.44 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.45:*:*:*:*:*:*:* Versions 1.45 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.46:*:*:*:*:*:*:* Versions 1.46 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.47:*:*:*:*:*:*:* Versions 1.47 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.48:*:*:*:*:*:*:* Versions 1.48 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:1.49:*:*:*:*:*:*:* Versions 1.49 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.1.1:*:*:*:*:*:*:* Versions 2.1.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.1.2:*:*:*:*:*:*:* Versions 2.1.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.1.3:*:*:*:*:*:*:* Versions 2.1.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.2.2:*:*:*:*:*:*:* Versions 2.2.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.4.0:*:*:*:*:*:*:* Versions 2.4.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.5.0:*:*:*:*:*:*:* Versions 2.5.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.5.1:*:*:*:*:*:*:* Versions 2.5.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.0:*:*:*:*:*:*:* Versions 2.6.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.1:*:*:*:*:*:*:* Versions 2.6.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.3:*:*:*:*:*:*:* Versions 2.6.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.4:*:*:*:*:*:*:* Versions 2.6.4 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.5:*:*:*:*:*:*:* Versions 2.6.5 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.6.6:*:*:*:*:*:*:* Versions 2.6.6 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.7.0:*:*:*:*:*:*:* Versions 2.7.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.7.2:*:*:*:*:*:*:* Versions 2.7.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.0:*:*:*:*:*:*:* Versions 2.8.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.1:*:*:*:*:*:*:* Versions 2.8.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.2:*:*:*:*:*:*:* Versions 2.8.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.3:*:*:*:*:*:*:* Versions 2.8.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.4:*:*:*:*:*:*:* Versions 2.8.4 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.5:*:*:*:*:*:*:* Versions 2.8.5 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.6:*:*:*:*:*:*:* Versions 2.8.6 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.7:*:*:*:*:*:*:* Versions 2.8.7 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.8.8:*:*:*:*:*:*:* Versions 2.8.8 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.9.0:*:*:*:*:*:*:* Versions 2.9.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.9.1:*:*:*:*:*:*:* Versions 2.9.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.9.2:*:*:*:*:*:*:* Versions 2.9.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.0:*:*:*:*:*:*:* Versions 2.10.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.1:*:*:*:*:*:*:* Versions 2.10.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.2:*:*:*:*:*:*:* Versions 2.10.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.3:*:*:*:*:*:*:* Versions 2.10.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.4:*:*:*:*:*:*:* Versions 2.10.4 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.5:*:*:*:*:*:*:* Versions 2.10.5 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.6:*:*:*:*:*:*:* Versions 2.10.6 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.10.7:*:*:*:*:*:*:* Versions 2.10.7 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.0:*:*:*:*:*:*:* Versions 2.11.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.1:*:*:*:*:*:*:* Versions 2.11.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.2:*:*:*:*:*:*:* Versions 2.11.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.3:*:*:*:*:*:*:* Versions 2.11.3 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.4:*:*:*:*:*:*:* Versions 2.11.4 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.5:*:*:*:*:*:*:* Versions 2.11.5 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.6:*:*:*:*:*:*:* Versions 2.11.6 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.7:*:*:*:*:*:*:* Versions 2.11.7 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.11.8:*:*:*:*:*:*:* Versions 2.11.8 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.13.0:*:*:*:*:*:*:* Versions 2.13.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.14.0:*:*:*:*:*:*:* Versions 2.14.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.14.1:*:*:*:*:*:*:* Versions 2.14.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.15.0:*:*:*:*:*:*:* Versions 2.15.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.15.1:*:*:*:*:*:*:* Versions 2.15.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.16.0:*:*:*:*:*:*:* Versions 2.16.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.16.1:*:*:*:*:*:*:* Versions 2.16.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.17.0:*:*:*:*:*:*:* Versions 2.17.0 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.17.1:*:*:*:*:*:*:* Versions 2.17.1 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.17.2:*:*:*:*:*:*:* Versions 2.17.2 Vulnerable ·Perl
- cpe:2.3:a:perl:perl:2.18.0:*:*:*:*:*:*:* Versions 2.18.0 Vulnerable ·Perl
Remediation
Red Hat 1 advisory
- RHSA-2012:1116 Released 2012-07-25 · Red Hat rating Moderateperl-DBD-Pg security update
- Red Hat Enterprise Linux (v. 5 server) perl-DBD-Pg-1.49-4.el5_8, perl-DBD-Pg-1.49-4.el5_8.i386, perl-DBD-Pg-1.49-4.el5_8.ia64 +1
- Red Hat Enterprise Linux Desktop (v. 5 client) perl-DBD-Pg-1.49-4.el5_8, perl-DBD-Pg-1.49-4.el5_8.i386
- Red Hat Enterprise Linux HPC Node (v. 6) perl-DBD-Pg-2.15.1-4.el6_3
- Red Hat Enterprise Linux Server (v. 6) perl-DBD-Pg-2.15.1-4.el6_3
- Red Hat Enterprise Linux Workstation (v. 6) perl-DBD-Pg-2.15.1-4.el6_3
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux (v. 5 server) | Fixed | RHSA-2012:1116 |
| Red Hat Enterprise Linux Desktop (v. 5 client) | Fixed | RHSA-2012:1116 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:1116 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:1116 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:1116 |
Timeline
- 2026-10-02 Threatist record created from CVE-2012-1151
- 2026-10-03 Alias added: GHSA-h6fj-j4mh-7x7h
References
Other 6
- [oss-security] 20120309 Re: CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536
- http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes
- https://bugzilla.redhat.com/show_bug.cgi?id=801733
- [oss-security] 20120309 CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws
- https://rt.cpan.org/Public/Bug/Display.html?id=75642
More Perl vulnerabilities
- TI-2022-24100 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead… CVSS 3.1CRITICAL 9.8
- TI-2012-05140 The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl… CVSS 2.0HIGH 7.5
- TI-2018-12932 Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular… CVSS 3.0CRITICAL 9.8
- TI-2018-12931 Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular… CVSS 3.0CRITICAL 9.8
- TI-2018-05049 Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows… CVSS 3.0CRITICAL 9.8
- TI-2017-09493 Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl… CVSS 3.0CRITICAL 9.8
Sources
- CVE-2012-1151 · CVE Program
- CVE-2012-1151 · NVD
- FIRST EPSS
- GHSA-h6fj-j4mh-7x7h · GitHub Advisory Database · CC BY 4.0
- CVE-2012-1151 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences