Vulnerabilities > CVE-2020-14393 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.1 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

NVD

Published: 2020-09-16

Updated: 2023-11-07

Summary

A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply a string longer than 300 characters could cause an out-of-bounds write, affecting the availability of the service or integrity of data.

Vulnerable Configurations

Part	Description	Count
Application	Perl Perl Database Interface 1.601 Perl Database Interface 1.602 Perl Database Interface 1.603 Perl Database Interface 1.604 Perl Database Interface 1.605 Perl Database Interface 1.606 Perl Database Interface 1.607 Perl Database Interface 1.608 Perl Database Interface 1.609 Perl Database Interface 1.611 Perl Database Interface 1.611_90 Perl Database Interface 1.611_91 Perl Database Interface 1.611_92 Perl Database Interface 1.611_93 Perl Database Interface 1.611_94 Perl Database Interface 1.612 Perl Database Interface 1.613 Perl Database Interface 1.613_70 Perl Database Interface 1.613_71 Perl Database Interface 1.613_90 Perl Database Interface 1.613_91 Perl Database Interface 1.613_92 Perl Database Interface 1.613_93 Perl Database Interface 1.614 Perl Database Interface 1.614_90 Perl Database Interface 1.615 Perl Database Interface 1.616 Perl Database Interface 1.617 Perl Database Interface 1.618 Perl Database Interface 1.619 Perl Database Interface 1.620 Perl Database Interface 1.621 Perl Database Interface 1.622 Perl Database Interface 1.623 Perl Database Interface 1.624 Perl Database Interface 1.625 Perl Database Interface 1.626 Perl Database Interface 1.627 Perl Database Interface 1.628 Perl Database Interface 1.630 Perl Database Interface 1.631 Perl Database Interface 1.632 Perl Database Interface 1.632_90 Perl Database Interface 1.633 Perl Database Interface 1.633_90 Perl Database Interface 1.633_91 Perl Database Interface 1.633_92 Perl Database Interface 1.634 Perl Database Interface 1.635 Perl Database Interface 1.636 Perl Database Interface 1.637 Perl Database Interface 1.638 Perl Database Interface 1.639 Perl Database Interface 1.640 Perl Database Interface 1.641 Perl Database Interface 1.642	56
OS	Opensuse Opensuse Leap 15.2	1
OS	Debian Debian Debian Linux 9.0	1
OS	Fedoraproject Fedoraproject Fedora 31	1

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References