Vulnerabilities > CVE-2019-20919 - NULL Pointer Dereference vulnerability in multiple products

CVSS 4.7 - MEDIUM

Attack vector

LOCAL

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

high complexity

NVD

Published: 2020-09-17

Updated: 2023-11-07

Summary

An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.

Vulnerable Configurations

Part	Description	Count
Application	Perl Perl DBI 0.58 Perl DBI 0.59 Perl DBI 0.60 Perl DBI 0.61 Perl DBI 0.62 Perl DBI 0.63 Perl DBI 0.64 Perl DBI 0.65 Perl DBI 0.66 Perl DBI 0.67 Perl DBI 0.68 Perl DBI 0.69 Perl DBI 0.70 Perl DBI 0.71 Perl DBI 0.72 Perl DBI 0.73 Perl DBI 0.74 Perl DBI 0.75 Perl DBI 0.76 Perl DBI 0.77 Perl DBI 0.78 Perl DBI 0.79 Perl DBI 0.80 Perl DBI 0.81 Perl DBI 0.82 Perl DBI 0.83 Perl DBI 0.84 Perl DBI 0.85 Perl DBI 0.86 Perl DBI 0.87 Perl DBI 0.88 Perl DBI 0.89 Perl DBI 0.90 Perl DBI 0.91 Perl DBI 0.92 Perl DBI 0.93 Perl DBI 0.94 Perl DBI 0.95 Perl DBI 1.00 Perl DBI 1.01 Perl DBI 1.02 Perl DBI 1.03 Perl DBI 1.04 Perl DBI 1.05 Perl DBI 1.06 Perl DBI 1.07 Perl DBI 1.08 Perl DBI 1.09 Perl DBI 1.10 Perl DBI 1.11 Perl DBI 1.12 Perl DBI 1.13 Perl DBI 1.14 Perl DBI 1.15 Perl DBI 1.16 Perl DBI 1.17 Perl DBI 1.18 Perl DBI 1.19 Perl DBI 1.20 Perl DBI 1.21 Perl DBI 1.22 Perl DBI 1.23 Perl DBI 1.24 Perl DBI 1.25 Perl DBI 1.26 Perl DBI 1.27 Perl DBI 1.28 Perl DBI 1.29 Perl DBI 1.30 Perl DBI 1.31 Perl DBI 1.32 Perl DBI 1.33 Perl DBI 1.34 Perl DBI 1.35 Perl DBI 1.36 Perl DBI 1.37 Perl DBI 1.38 Perl DBI 1.39 Perl DBI 1.40 Perl DBI 1.41 Perl DBI 1.42 Perl DBI 1.43 Perl DBI 1.44 Perl DBI 1.45 Perl DBI 1.46 Perl DBI 1.47 Perl DBI 1.48 Perl DBI 1.48A Perl DBI 1.49 Perl DBI 1.50 Perl DBI 1.51 Perl DBI 1.52 Perl DBI 1.53 Perl DBI 1.54 Perl DBI 1.55 Perl DBI 1.56 Perl DBI 1.57 Perl DBI 1.58 Perl DBI 1.59 Perl DBI 1.601 Perl DBI 1.602 Perl DBI 1.603 Perl DBI 1.604 Perl DBI 1.605 Perl DBI 1.606 Perl DBI 1.607 Perl DBI 1.608 Perl DBI 1.609 Perl DBI 1.611 Perl DBI 1.611_90 Perl DBI 1.611_91 Perl DBI 1.611_92 Perl DBI 1.611_93 Perl DBI 1.611_94 Perl DBI 1.612 Perl DBI 1.613 Perl DBI 1.613_70 Perl DBI 1.613_71 Perl DBI 1.613_90	119
OS	Fedoraproject Fedoraproject Fedora 31	1
OS	Canonical Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04	4
OS	Debian Debian Debian Linux 9.0	1
OS	Opensuse Opensuse Leap 15.1 Opensuse Leap 15.2	2

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

References

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.