CVE-2009-1341 Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory....
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian libdbd-pg-perl | <= 1.4.9 | No fix listed |
| debian libdbd-pg-perl | = 0.1 | No fix listed |
| debian libdbd-pg-perl | = 0.2 | No fix listed |
| debian libdbd-pg-perl | = 0.3 | No fix listed |
| debian libdbd-pg-perl | = 0.4 | No fix listed |
| debian libdbd-pg-perl | = 0.5 | No fix listed |
| debian libdbd-pg-perl | = 0.51 | No fix listed |
| debian libdbd-pg-perl | = 0.52 | No fix listed |
| debian libdbd-pg-perl | = 0.61 | No fix listed |
| debian libdbd-pg-perl | = 0.62 | No fix listed |
| debian libdbd-pg-perl | = 0.63 | No fix listed |
| debian libdbd-pg-perl | = 0.64 | No fix listed |
| debian libdbd-pg-perl | = 0.65 | No fix listed |
| debian libdbd-pg-perl | = 0.66 | No fix listed |
| debian libdbd-pg-perl | = 0.67 | No fix listed |
| debian libdbd-pg-perl | = 0.68 | No fix listed |
| debian libdbd-pg-perl | = 0.69 | No fix listed |
| debian libdbd-pg-perl | = 0.70 | No fix listed |
| debian libdbd-pg-perl | = 0.71 | No fix listed |
| debian libdbd-pg-perl | = 0.72 | No fix listed |
| debian libdbd-pg-perl | = 0.73 | No fix listed |
| debian libdbd-pg-perl | = 0.80 | No fix listed |
| debian libdbd-pg-perl | = 0.81 | No fix listed |
| debian libdbd-pg-perl | = 0.82 | No fix listed |
| debian libdbd-pg-perl | = 0.83 | No fix listed |
Show 35 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian libdbd-pg-perl | = 0.84 | No fix listed |
| debian libdbd-pg-perl | = 0.85 | No fix listed |
| debian libdbd-pg-perl | = 0.86 | No fix listed |
| debian libdbd-pg-perl | = 0.87 | No fix listed |
| debian libdbd-pg-perl | = 0.88 | No fix listed |
| debian libdbd-pg-perl | = 0.89 | No fix listed |
| debian libdbd-pg-perl | = 0.90 | No fix listed |
| debian libdbd-pg-perl | = 0.91 | No fix listed |
| debian libdbd-pg-perl | = 0.92 | No fix listed |
| debian libdbd-pg-perl | = 0.93 | No fix listed |
| debian libdbd-pg-perl | = 0.94 | No fix listed |
| debian libdbd-pg-perl | = 0.95 | No fix listed |
| debian libdbd-pg-perl | = 0.96 | No fix listed |
| debian libdbd-pg-perl | = 0.97 | No fix listed |
| debian libdbd-pg-perl | = 0.98 | No fix listed |
| debian libdbd-pg-perl | = 0.99 | No fix listed |
| debian libdbd-pg-perl | = 1.0.0 | No fix listed |
| debian libdbd-pg-perl | = 1.0.1 | No fix listed |
| debian libdbd-pg-perl | = 1.2.0 | No fix listed |
| debian libdbd-pg-perl | = 1.2.1 | No fix listed |
| debian libdbd-pg-perl | = 1.2.2 | No fix listed |
| debian libdbd-pg-perl | = 1.3.1 | No fix listed |
| debian libdbd-pg-perl | = 1.3.2 | No fix listed |
| debian libdbd-pg-perl | = 1.4.0 | No fix listed |
| debian libdbd-pg-perl | = 1.4.1 | No fix listed |
| debian libdbd-pg-perl | = 1.4.2 | No fix listed |
| debian libdbd-pg-perl | = 1.4.3 | No fix listed |
| debian libdbd-pg-perl | = 1.4.4 | No fix listed |
| debian libdbd-pg-perl | = 1.4.5 | No fix listed |
| debian libdbd-pg-perl | = 1.4.6 | No fix listed |
| debian libdbd-pg-perl | = 1.4.7 | No fix listed |
| debian libdbd-pg-perl | = 1.4.8 | No fix listed |
| debian libdbd-pg-perl(Debian:12) | < 2.1.3-1 | 2.1.3-1 |
| debian libdbd-pg-perl(Debian:13) | < 2.1.3-1 | 2.1.3-1 |
| debian libdbd-pg-perl(Debian:14) | < 2.1.3-1 | 2.1.3-1 |
References
- cpansearch.perl.org
- SUSE-SR:2009:012 vendor-advisory
- rt.cpan.org
- 34909 third-party-advisory vendor-advisory
- 35058 third-party-advisory vendor-advisory
- 35685 third-party-advisory
- security.debian.org
- DSA-1780 vendor-advisory
- RHSA-2009:0479 vendor-advisory
- RHSA-2009:1067 vendor-advisory
- 34757 vdb-entry
- libdbdpgperl-dequotebytea-dos(50387) vdb-entry
- launchpad.net
- oval:org.mitre.oval:def:9680 signature vdb-entry
- Debian Security Tracker CVE-2009-1341 vendor-advisory