CVE-2009-1341

Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
debianlibdbd-pg-perl
𝑥
≤ 1.4.9
debianlibdbd-pg-perl
0.1
debianlibdbd-pg-perl
0.2
debianlibdbd-pg-perl
0.3
debianlibdbd-pg-perl
0.4
debianlibdbd-pg-perl
0.5
debianlibdbd-pg-perl
0.51
debianlibdbd-pg-perl
0.52
debianlibdbd-pg-perl
0.61
debianlibdbd-pg-perl
0.62
debianlibdbd-pg-perl
0.63
debianlibdbd-pg-perl
0.64
debianlibdbd-pg-perl
0.65
debianlibdbd-pg-perl
0.66
debianlibdbd-pg-perl
0.67
debianlibdbd-pg-perl
0.68
debianlibdbd-pg-perl
0.69
debianlibdbd-pg-perl
0.70
debianlibdbd-pg-perl
0.71
debianlibdbd-pg-perl
0.72
debianlibdbd-pg-perl
0.73
debianlibdbd-pg-perl
0.80
debianlibdbd-pg-perl
0.81
debianlibdbd-pg-perl
0.82
debianlibdbd-pg-perl
0.83
debianlibdbd-pg-perl
0.84
debianlibdbd-pg-perl
0.85
debianlibdbd-pg-perl
0.86
debianlibdbd-pg-perl
0.87
debianlibdbd-pg-perl
0.88
debianlibdbd-pg-perl
0.89
debianlibdbd-pg-perl
0.90
debianlibdbd-pg-perl
0.91
debianlibdbd-pg-perl
0.92
debianlibdbd-pg-perl
0.93
debianlibdbd-pg-perl
0.94
debianlibdbd-pg-perl
0.95
debianlibdbd-pg-perl
0.96
debianlibdbd-pg-perl
0.97
debianlibdbd-pg-perl
0.98
debianlibdbd-pg-perl
0.99
debianlibdbd-pg-perl
1.0.0
debianlibdbd-pg-perl
1.0.1
debianlibdbd-pg-perl
1.2.0
debianlibdbd-pg-perl
1.2.1
debianlibdbd-pg-perl
1.2.2
debianlibdbd-pg-perl
1.3.1
debianlibdbd-pg-perl
1.3.2
debianlibdbd-pg-perl
1.4.0
debianlibdbd-pg-perl
1.4.1
debianlibdbd-pg-perl
1.4.2
debianlibdbd-pg-perl
1.4.3
debianlibdbd-pg-perl
1.4.4
debianlibdbd-pg-perl
1.4.5
debianlibdbd-pg-perl
1.4.6
debianlibdbd-pg-perl
1.4.7
debianlibdbd-pg-perl
1.4.8
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libdbd-pg-perl
bullseye
3.14.2-1
fixed
bookworm
3.16.0-2
fixed
sid
3.18.0-1
fixed
trixie
3.18.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libdbd-pg-perl
oneiric
not-affected
natty
not-affected
maverick
not-affected
lucid
not-affected
karmic
ignored
jaunty
ignored
intrepid
ignored
hardy
ignored
dapper
ignored
Common Weakness Enumeration
References
http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
http://rt.cpan.org/Public/Bug/Display.html?id=21392
http://secunia.com/advisories/34909
http://secunia.com/advisories/35058
http://secunia.com/advisories/35685
http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
http://www.debian.org/security/2009/dsa-1780
http://www.redhat.com/support/errata/RHSA-2009-0479.html
http://www.redhat.com/support/errata/RHSA-2009-1067.html
http://www.securityfocus.com/bid/34757
https://exchange.xforce.ibmcloud.com/vulnerabilities/50387
https://launchpad.net/bugs/cve/2009-1341
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680
http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
http://rt.cpan.org/Public/Bug/Display.html?id=21392
http://secunia.com/advisories/34909
http://secunia.com/advisories/35058
http://secunia.com/advisories/35685
http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
http://www.debian.org/security/2009/dsa-1780
http://www.redhat.com/support/errata/RHSA-2009-0479.html
http://www.redhat.com/support/errata/RHSA-2009-1067.html
http://www.securityfocus.com/bid/34757
https://exchange.xforce.ibmcloud.com/vulnerabilities/50387
https://launchpad.net/bugs/cve/2009-1341
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680