5

CVE-2012-1151

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Perl ≫ Perl Version <= 2.18.1
Perl ≫ Perl Version 0.1
Perl ≫ Perl Version 0.2
Perl ≫ Perl Version 0.3
Perl ≫ Perl Version 0.4
Perl ≫ Perl Version 0.5
Perl ≫ Perl Version 0.52
Perl ≫ Perl Version 0.61
Perl ≫ Perl Version 0.62
Perl ≫ Perl Version 0.63
Perl ≫ Perl Version 0.64
Perl ≫ Perl Version 0.65
Perl ≫ Perl Version 0.66
Perl ≫ Perl Version 0.67
Perl ≫ Perl Version 0.68
Perl ≫ Perl Version 0.69
Perl ≫ Perl Version 0.70
Perl ≫ Perl Version 0.71
Perl ≫ Perl Version 0.72
Perl ≫ Perl Version 0.73
Perl ≫ Perl Version 0.80
Perl ≫ Perl Version 0.81
Perl ≫ Perl Version 0.82
Perl ≫ Perl Version 0.83
Perl ≫ Perl Version 0.84
Perl ≫ Perl Version 0.85
Perl ≫ Perl Version 0.86
Perl ≫ Perl Version 0.87
Perl ≫ Perl Version 0.88
Perl ≫ Perl Version 0.89
Perl ≫ Perl Version 0.90
Perl ≫ Perl Version 0.91
Perl ≫ Perl Version 0.92
Perl ≫ Perl Version 0.93
Perl ≫ Perl Version 0.94
Perl ≫ Perl Version 0.95
Perl ≫ Perl Version 0.96
Perl ≫ Perl Version 0.97
Perl ≫ Perl Version 0.98
Perl ≫ Perl Version 0.99
Perl ≫ Perl Version 1.00
Perl ≫ Perl Version 1.01
Perl ≫ Perl Version 1.20
Perl ≫ Perl Version 1.21
Perl ≫ Perl Version 1.22
Perl ≫ Perl Version 1.31
Perl ≫ Perl Version 1.32
Perl ≫ Perl Version 1.40
Perl ≫ Perl Version 1.41
Perl ≫ Perl Version 1.42
Perl ≫ Perl Version 1.43
Perl ≫ Perl Version 1.44
Perl ≫ Perl Version 1.45
Perl ≫ Perl Version 1.46
Perl ≫ Perl Version 1.47
Perl ≫ Perl Version 1.48
Perl ≫ Perl Version 1.49
Perl ≫ Perl Version 2.0.0
Perl ≫ Perl Version 2.1.0
Perl ≫ Perl Version 2.1.1
Perl ≫ Perl Version 2.1.2
Perl ≫ Perl Version 2.1.3
Perl ≫ Perl Version 2.2.0
Perl ≫ Perl Version 2.2.1
Perl ≫ Perl Version 2.2.2
Perl ≫ Perl Version 2.3.0
Perl ≫ Perl Version 2.4.0
Perl ≫ Perl Version 2.5.0
Perl ≫ Perl Version 2.5.1
Perl ≫ Perl Version 2.6.0
Perl ≫ Perl Version 2.6.1
Perl ≫ Perl Version 2.6.2
Perl ≫ Perl Version 2.6.3
Perl ≫ Perl Version 2.6.4
Perl ≫ Perl Version 2.6.5
Perl ≫ Perl Version 2.6.6
Perl ≫ Perl Version 2.7.0
Perl ≫ Perl Version 2.7.1
Perl ≫ Perl Version 2.7.2
Perl ≫ Perl Version 2.8.0
Perl ≫ Perl Version 2.8.1
Perl ≫ Perl Version 2.8.2
Perl ≫ Perl Version 2.8.3
Perl ≫ Perl Version 2.8.4
Perl ≫ Perl Version 2.8.5
Perl ≫ Perl Version 2.8.6
Perl ≫ Perl Version 2.8.7
Perl ≫ Perl Version 2.8.8
Perl ≫ Perl Version 2.9.0
Perl ≫ Perl Version 2.9.1
Perl ≫ Perl Version 2.9.2
Perl ≫ Perl Version 2.10.0
Perl ≫ Perl Version 2.10.1
Perl ≫ Perl Version 2.10.2
Perl ≫ Perl Version 2.10.3
Perl ≫ Perl Version 2.10.4
Perl ≫ Perl Version 2.10.5
Perl ≫ Perl Version 2.10.6
Perl ≫ Perl Version 2.10.7
Perl ≫ Perl Version 2.11.0
Perl ≫ Perl Version 2.11.1
Perl ≫ Perl Version 2.11.2
Perl ≫ Perl Version 2.11.3
Perl ≫ Perl Version 2.11.4
Perl ≫ Perl Version 2.11.5
Perl ≫ Perl Version 2.11.6
Perl ≫ Perl Version 2.11.7
Perl ≫ Perl Version 2.11.8
Perl ≫ Perl Version 2.12.0
Perl ≫ Perl Version 2.13.0
Perl ≫ Perl Version 2.14.0
Perl ≫ Perl Version 2.14.1
Perl ≫ Perl Version 2.15.0
Perl ≫ Perl Version 2.15.1
Perl ≫ Perl Version 2.16.0
Perl ≫ Perl Version 2.16.1
Perl ≫ Perl Version 2.17.0
Perl ≫ Perl Version 2.17.1
Perl ≫ Perl Version 2.17.2
Perl ≫ Perl Version 2.18.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.74% 0.842
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536
http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes
http://rhn.redhat.com/errata/RHSA-2012-1116.html
http://secunia.com/advisories/48307
Vendor Advisory
http://secunia.com/advisories/48319
Vendor Advisory
http://secunia.com/advisories/48824
http://security.gentoo.org/glsa/glsa-201204-08.xml
http://www.debian.org/security/2012/dsa-2431
http://www.mandriva.com/security/advisories?name=MDVSA-2012:112
http://www.openwall.com/lists/oss-security/2012/03/09/6
http://www.openwall.com/lists/oss-security/2012/03/10/4
https://bugzilla.redhat.com/show_bug.cgi?id=801733
https://exchange.xforce.ibmcloud.com/vulnerabilities/73854
https://exchange.xforce.ibmcloud.com/vulnerabilities/73855
https://rt.cpan.org/Public/Bug/Display.html?id=75642