Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:perl:dbi:*:*:*:*:*:*:*:*

3 briefs RSS
high advisory

Code Injection Vulnerability in Perl DBI

An incomplete patch for CVE-2026-14380 introduced a code injection vulnerability (CWE-94) in the perl-DBI package for Red Hat Enterprise Linux 9 and 10, potentially allowing authenticated attackers to execute arbitrary code.

Red Hat Enterprise Linux 9 +2 vulnerability rce rhel
1t 1c
critical advisory

CVE-2026-14739 DBI for Perl Heap Overflow Vulnerability

CVE-2026-14739 details a heap overflow vulnerability affecting DBI for Perl versions prior to 1.650, which arises during the preparsing of SQL statements with an excessive number of placeholders, potentially leading to arbitrary code execution or a denial of service.

DBI < 1.650 +1 vulnerability heap-overflow perl dbi cve
1c
medium advisory

Perl DBI Out-of-Bounds Read Vulnerability CVE-2026-14740

CVE-2026-14740 describes an out-of-bounds read vulnerability in DBI versions prior to 1.650 for Perl, occurring during the preparse stage when deleting an initial SQL comment, which can lead to information disclosure or denial of service.

DBI < 1.650 vulnerability perl memory-corruption information-disclosure
1c