Astra Linux – Vulnerability in libdbi-perl

A issue was discovered in the DBI module through version 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically specified via the fdir attribute in the data source name DSN. NOTE: This issue exists due to an incomplete fix for CVE-2014-10401...

[SECURITY] [DLA 4764-2] libdbd-csv-perl regression update

Debian LTS Advisory DLA-4764-2 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbd-csv-perl Version : 0.5800-1+deb11u1 0.6000-1+deb12u1 Debian Bug : 1139509 The security fix for CVE-2026-15392 symlink escape ...

Security Bulletin: IBM QRadar SIEM contains components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in IBM QRadar SIEM Vulnerability Details CVEID:CVE-2026-15392 DESCRIPTION: DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.24 IF3 Vulnerability Details CVEID:CVE-2026-15043 DESCRIPTION: DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = and = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQ...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2026:3461-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3461-1 advisory. - CVE-2026-14380: unvalidated string eval interpolation of the Profile package name can lead to arbitrary Perl code execution bsc1271018. -...

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location

...

Linux Distros Unpatched Vulnerability : CVE-2026-15392

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolut...

ALPINE-CVE-2026-15392

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

AZL-92424 CVE-2026-15392 affecting package perl-DBI for versions less than 1.651-1

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

CVE-2026-15392

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

CVE-2026-15392

The DBD::File component in the Perl DBI framework (versions before 1.651 ) is vulnerable to a path traversal flaw. The complete_table_name method fails to verify if a table file is a symbolic link . An attacker could use a link within the data directory to point to a file outside the configured f...

CVE-2026-15392

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

CVE-2026-15043

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted = SQL operators on text. DBI::SQL::Nano, DBI's built-in mini-SQL engine, evaluated WHERE predicates incorrectly in some cases. In the non-numeric string branch of the ismatched method, = was evaluated using Perl's le operator...

CVE-2026-15392: Improper Limitation of a Pathname to a Restricted Directory

DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location. The completetablename method builds the absolute table file path without checking whether the file is a symbolic link. A link inside the data directory can point to a table file at any...

PT-2026-58062

Name of the Vulnerable Software and Affected Versions DBD::File versions prior to 1.651 Description The software fails to verify if a table file is a symbolic link to an untrusted location. The complete table name function constructs the absolute path to the table file without checking for symbol...

EUVD-2014-1173

Malware in sbrugna...

EUVD-2014-1172

Malware in sbrugna...

SUSE SLES12 Security Update : perl-DBI (SUSE-SU-2024:3136-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3136-1 advisory. - CVE-2014-10401: Fixed incorrect permission on opening files via DBD::File drivers bsc1176492 - CVE-2014-10402: Fixed incorrect...

RHEL 8 : perl-dbi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl-dbi: Buffer overflow on an overlong DBD class name CVE-2020-14393 - An issue was discovered in the D...

Debian DLA-3035-1 : libdbi-perl - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3035 advisory. It was discovered that CVE-2014-10401 was fixed incompletely in the Perl5 Database Interface DBI. An attacker could trigger information disclosure through a...