CVE-2012-1151 Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (proces...
MediumCVSS 5.0
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian libdbd-pg-perl(Debian:12) | < 2.19.0-1 | 2.19.0-1 |
| debian libdbd-pg-perl(Debian:13) | < 2.19.0-1 | 2.19.0-1 |
| debian libdbd-pg-perl(Debian:14) | < 2.19.0-1 | 2.19.0-1 |
| perl | <= 2.18.1 | No fix listed |
| perl | = 0.1 | No fix listed |
| perl | = 0.2 | No fix listed |
| perl | = 0.3 | No fix listed |
| perl | = 0.4 | No fix listed |
| perl | = 0.5 | No fix listed |
| perl | = 0.52 | No fix listed |
| perl | = 0.61 | No fix listed |
| perl | = 0.62 | No fix listed |
| perl | = 0.63 | No fix listed |
| perl | = 0.64 | No fix listed |
| perl | = 0.65 | No fix listed |
| perl | = 0.66 | No fix listed |
| perl | = 0.67 | No fix listed |
| perl | = 0.68 | No fix listed |
| perl | = 0.69 | No fix listed |
| perl | = 0.70 | No fix listed |
| perl | = 0.71 | No fix listed |
| perl | = 0.72 | No fix listed |
| perl | = 0.73 | No fix listed |
| perl | = 0.80 | No fix listed |
| perl | = 0.81 | No fix listed |
Show 98 more
| Product | Affected versions | Fixed in |
|---|---|---|
| perl | = 0.82 | No fix listed |
| perl | = 0.83 | No fix listed |
| perl | = 0.84 | No fix listed |
| perl | = 0.85 | No fix listed |
| perl | = 0.86 | No fix listed |
| perl | = 0.87 | No fix listed |
| perl | = 0.88 | No fix listed |
| perl | = 0.89 | No fix listed |
| perl | = 0.90 | No fix listed |
| perl | = 0.91 | No fix listed |
| perl | = 0.92 | No fix listed |
| perl | = 0.93 | No fix listed |
| perl | = 0.94 | No fix listed |
| perl | = 0.95 | No fix listed |
| perl | = 0.96 | No fix listed |
| perl | = 0.97 | No fix listed |
| perl | = 0.98 | No fix listed |
| perl | = 0.99 | No fix listed |
| perl | = 1.00 | No fix listed |
| perl | = 1.01 | No fix listed |
| perl | = 1.20 | No fix listed |
| perl | = 1.21 | No fix listed |
| perl | = 1.22 | No fix listed |
| perl | = 1.31 | No fix listed |
| perl | = 1.32 | No fix listed |
| perl | = 1.40 | No fix listed |
| perl | = 1.41 | No fix listed |
| perl | = 1.42 | No fix listed |
| perl | = 1.43 | No fix listed |
| perl | = 1.44 | No fix listed |
| perl | = 1.45 | No fix listed |
| perl | = 1.46 | No fix listed |
| perl | = 1.47 | No fix listed |
| perl | = 1.48 | No fix listed |
| perl | = 1.49 | No fix listed |
| perl | = 2.0.0 | No fix listed |
| perl | = 2.1.0 | No fix listed |
| perl | = 2.1.1 | No fix listed |
| perl | = 2.1.2 | No fix listed |
| perl | = 2.1.3 | No fix listed |
| perl | = 2.2.0 | No fix listed |
| perl | = 2.2.1 | No fix listed |
| perl | = 2.2.2 | No fix listed |
| perl | = 2.3.0 | No fix listed |
| perl | = 2.4.0 | No fix listed |
| perl | = 2.5.0 | No fix listed |
| perl | = 2.5.1 | No fix listed |
| perl | = 2.6.0 | No fix listed |
| perl | = 2.6.1 | No fix listed |
| perl | = 2.6.2 | No fix listed |
| perl | = 2.6.3 | No fix listed |
| perl | = 2.6.4 | No fix listed |
| perl | = 2.6.5 | No fix listed |
| perl | = 2.6.6 | No fix listed |
| perl | = 2.7.0 | No fix listed |
| perl | = 2.7.1 | No fix listed |
| perl | = 2.7.2 | No fix listed |
| perl | = 2.8.0 | No fix listed |
| perl | = 2.8.1 | No fix listed |
| perl | = 2.8.2 | No fix listed |
| perl | = 2.8.3 | No fix listed |
| perl | = 2.8.4 | No fix listed |
| perl | = 2.8.5 | No fix listed |
| perl | = 2.8.6 | No fix listed |
| perl | = 2.8.7 | No fix listed |
| perl | = 2.8.8 | No fix listed |
| perl | = 2.9.0 | No fix listed |
| perl | = 2.9.1 | No fix listed |
| perl | = 2.9.2 | No fix listed |
| perl | = 2.10.0 | No fix listed |
| perl | = 2.10.1 | No fix listed |
| perl | = 2.10.2 | No fix listed |
| perl | = 2.10.3 | No fix listed |
| perl | = 2.10.4 | No fix listed |
| perl | = 2.10.5 | No fix listed |
| perl | = 2.10.6 | No fix listed |
| perl | = 2.10.7 | No fix listed |
| perl | = 2.11.0 | No fix listed |
| perl | = 2.11.1 | No fix listed |
| perl | = 2.11.2 | No fix listed |
| perl | = 2.11.3 | No fix listed |
| perl | = 2.11.4 | No fix listed |
| perl | = 2.11.5 | No fix listed |
| perl | = 2.11.6 | No fix listed |
| perl | = 2.11.7 | No fix listed |
| perl | = 2.11.8 | No fix listed |
| perl | = 2.12.0 | No fix listed |
| perl | = 2.13.0 | No fix listed |
| perl | = 2.14.0 | No fix listed |
| perl | = 2.14.1 | No fix listed |
| perl | = 2.15.0 | No fix listed |
| perl | = 2.15.1 | No fix listed |
| perl | = 2.16.0 | No fix listed |
| perl | = 2.16.1 | No fix listed |
| perl | = 2.17.0 | No fix listed |
| perl | = 2.17.1 | No fix listed |
| perl | = 2.17.2 | No fix listed |
| perl | = 2.18.0 | No fix listed |
References
- Debian Security Tracker CVE-2012-1151 vendor-advisory
- bugs.debian.org
- cpansearch.perl.org
- RHSA-2012:1116 vendor-advisory
- 48307 third-party-advisory vendor-advisory
- 48319 third-party-advisory vendor-advisory
- 48824 third-party-advisory
- GLSA-201204-08 vendor-advisory
- DSA-2431 vendor-advisory
- MDVSA-2012:112 vendor-advisory
- [oss-security] 20120309 CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws mailing-list
- [oss-security] 20120309 Re: CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flaws mailing-list
- bugzilla.redhat.com
- dbdpg-pgwarn-format-string(73854) vdb-entry
- dbdpg-dbdstprepare-format-string(73855) vdb-entry
- rt.cpan.org
- bugs.debian.org issue-tracking