Fedora 44 : perl-DBI (2026-57dcf299cc)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-57dcf299cc advisory. 1.652 - Fix CVE-2026-73194 and CVE-2026-73193 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note...

CVE-2026-73193

creationtimestamp| type| source ---|---|--- 2026-08-15 13:57:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/dfrjiqvly32hk 2026-08-17 21:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtconlew4b2c 2026-08-18 09:50:03+00:00| seen|...

CVE-2026-73193

In DBI's preparse function, buffer size is computed as strlen(statement) * 7 + 16 in a 32-bit STRLEN, wrapping at ~613 MB input to reserve only 19 bytes; a raw pointer copy then writes the entire input past the allocation. Affected: DBI