Oracle Linux 9 : perl-DBI (ELSA-2026-38512)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-38512 advisory. - Fix possible stack overflow and buffer overflow in DBI.xs CVE-2026-9698 Tenable has extracted the preceding description block directly from the Oracle Linux...

ALSA-2026:38513 Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Buffer overfl...

Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: DBI: Buffer overflow in...

Important: perl-DBI security update

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used. Security Fixes: DBI: DBI: Buffer overfl...

ALSA-2026:38901 Important: perl-DBI:1.641 security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fixes: DBI: DBI: Buffer overflow in...

RHEL 9 : perl-DBI (RHSA-2026:38512)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:38512 advisory. DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions,...

CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14380 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1

CVE-2026-14740 affecting package perl-DBI for versions less than 1.650-1. An upgraded version of the package is available that resolves this issue...

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

...

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile

...

SUSE-SU-2026:22592-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

SUSE-SU-2026:22623-1 Security update for perl-DBI

This update for perl-DBI fixes the following issues - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. - CVE-2026-14740: one-byte out-of-bounds read when deleting an initial SQL comment line can lead to a proce...

CVE-2026-10879

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The preparse method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can resul...

[SECURITY] Fedora 44 Update: perl-DBI-1.650-1.fc44

DBI is a database access Application Programming Interface API for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used...

SUSE CVE-2026-14380

DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile. When a string is assigned to a DBI handle's Profile attribute, DBI splits it into path, package and arguments, and interpolates the package part in a string eval with no validation of the package...

SUSE CVE-2026-14739

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did not allocate enough memory to handle approximately 1.2-million placeholders. DBI version 1.650 sets a hard limit of 99,999 placeholders...

OPENSUSE-SU-2026:11234-1 perl-DBI-1.650.0-1.1 on GA media

These are all security issues fixed in the perl-DBI-1.650.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2026-14740

A flaw was found in DBI for Perl. When processing SQL queries, the preparse method, which normalizes SQL and removes comments, can read one byte beyond its intended memory boundary. This occurs specifically when an SQL query begins with a comment line, leading to an out-of-bounds read during the...

CVE-2026-14739

A flaw was found in DBI for Perl. This vulnerability, a heap overflow, occurs when the software attempts to preparse SQL statements containing an extremely large number of placeholders. This could allow a remote attacker to cause a denial of service or potentially execute arbitrary code. Mitigati...

Linux Distros Unpatched Vulnerability : CVE-2026-14739

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders. The fix for CVE-2026-10879 did no...