Arbitrary Code Execution

2020-04-1000:32:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

JSON

perl-dbd-pg is vulnerable to arbitrary code execution. A heap-based buffer overflow flaw was discovered in the perl-DBD-Pg pg_getline function implementation. If the pg_getline or getline functions read large, untrusted records from a database, it could cause an application using these functions to crash or, possibly, execute arbitrary code.

CPENameOperatorVersion
mysqleq5.0.77__4.el5_4.1
mysqleq5.0.77__4.el5_5.5
mysqleq5.0.45__7.el5
mysqleq5.0.77__3.el5
mysqleq5.0.22__2.2.el5_1.1
mysqleq5.0.77__4.el5_5.3
mysqleq5.0.77__4.el5_6.6
mysqleq5.0.77__4.el5_5.4
mysqleq5.0.77__4.el5_4.2
postgresqlclient81eq8.1.14__1.el5s2

Name	Operator	Version
mysql	eq	5.0.77__4.el5_4.1
mysql	eq	5.0.77__4.el5_5.5
mysql	eq	5.0.45__7.el5
mysql	eq	5.0.77__3.el5
mysql	eq	5.0.22__2.2.el5_1.1
mysql	eq	5.0.77__4.el5_5.3
mysql	eq	5.0.77__4.el5_6.6
mysql	eq	5.0.77__4.el5_5.4
mysql	eq	5.0.77__4.el5_4.2
postgresqlclient81	eq	8.1.14__1.el5s2