CVE-2020-14393

Katalog CVE

CVSS 7.1 · High EPSS 0,61%

Kerentanan Stack-based Buffer Overflow pada perl database interface, opensuse leap +2 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

Rincian

Terbit di NVD

16 September 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow
CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.redhat.com/show_bug.cgi?id=1877409 issue tracking · patch · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00067.html advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/09/msg00026.html mailing list · advisory pihak ketiga
• https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643 release notes · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00074.html broken link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JXLKODJ7B57GI...