CVE-2014-10402

CVE-2014-10402 affects the Perl DBI module (DBD::File drivers) up to version 1.643. The flaw allows opening files from folders outside the DSN-specified f_dir attribute in the data source name, due to an incomplete fix for CVE-2014-10401. This can lead to information disclosure. A patch exists; D...

CVE-2019-20919

CVE-2019-20919 is related to the Perl DBI module. The issue affects Perl-DBI before version 1.643, where hv_fetch() checks for NULL but then calls SvOK(profile), causing a NULL pointer dereference. Several advisories (EulerOS, Red Hat, OpenVAS prompts) reference this CVE alongside CVE-2014-10401 ...

CVE-2014-10401

CVE-2014-10401 affects the Perl DBI module (DBD::File) where files can be opened from folders outside the DSN‑specified f_dir, due to an incomplete fix. Affected versions include DBI prior to 1.632; some advisories note ongoing risk or incomplete fixes (e.g., Debian DLA-3035 and Astra Linux note)...

CVE-2026-10879

The DBI database access API for Perl (versions before 1.648 ) contains a heap overflow vulnerability in its preparse method. The issue occurs when SQL statements contain more than 9 binders (placeholders), as the method only allocates three characters per binder in the buffer while placeholders 1...

CVE-2026-9698

CVE-2026-9698 affects the Perl DBI module. Versions before 1.648 save error messages in a 200-byte buffer without length control, allowing an attacker who can influence error text to trigger a buffer overflow. Connected sources confirm the issue in DBI for Perl and identify the vulnerable compone...

CVE-2026-14739

The DBI database access API for Perl (versions before 1.650 ) is vulnerable to a heap overflow during the preparsing of SQL statements. The root cause is insufficient memory allocation when handling an extreme number of placeholders (approximately 1.2 million), following an incomplete fix for CVE...

CVE-2026-14380

The DBI (Database Interface) module for the Perl programming language is vulnerable to arbitrary code execution in versions prior to 1.650 . The root cause is a lack of input validation when interpolating the package name within a string eval during the assignment of a string to the Profile attri...

CVE-2013-7490

Summary: CVE-2013-7490 affects the Perl DBI module prior to 1.632, where using many arguments to Callback methods may cause memory corruption. This issue is repeatedly reflected across multiple advisories (including SUSE/Red Hat/Nessus entries) and is acknowledged as a memory corruption bug in DB...

CVE-2013-7491

CVE-2013-7491 affects the Perl DBI module prior to 1.628. The issue is a stack corruption that occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack is reallocated. Impact is described as potential memory corruption related to stack handling; exploitation ...

CVE-2026-14740

Versions of the Perl DBI interface prior to 1.650 are vulnerable to an out-of-bounds read (one byte) during the preparse method. The issue occurs when the software attempts to normalize and remove an initial SQL comment line. This can cause a fault on memory-hardened builds or result in nondeterm...