DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.
Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.
Attackers that can influence the error text in an application can trigger a buffer overflow.
References
| Link | Resource |
|---|---|
| https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch | Patch |
| https://metacpan.org/release/HMBRAND/DBI-1.648/changes | Release Notes |
| http://www.openwall.com/lists/oss-security/2026/06/09/9 | Mailing List Third Party Advisory |
Configurations
History
09 Jun 2026, 17:20
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:perl:dbi:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch - Patch | |
| References | () https://metacpan.org/release/HMBRAND/DBI-1.648/changes - Release Notes | |
| References | () http://www.openwall.com/lists/oss-security/2026/06/09/9 - Mailing List, Third Party Advisory | |
| First Time |
Perl
Perl dbi |
09 Jun 2026, 11:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jun 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 08:16
Updated : 2026-06-09 17:20
NVD link : CVE-2026-9698
Mitre link : CVE-2026-9698
CVE.ORG link : CVE-2026-9698
JSON object : View
Products Affected
perl
- dbi
CWE
CWE-787
Out-of-bounds Write