Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Ubuntu 20.04 & 18.04 USN-5030-1: libdbi-perl Denial of Service

ubuntu
Calendar Grey August 4, 2021
Dist Ubuntu Esm H88
Important upgrades for libdbi-perl package in Ubuntu to address vulnerabilities impacting data management and permissions.
Several security issues were fixed in Perl DBI module.

Summary

Several security issues were fixed in Perl DBI module.

Software Description:

- libdbi-perl: Perl Database Interface (DBI)

Details:

It was discovered that the Perl DBI module incorrectly opened files outside

of the folder specified in the data source name. A remote attacker could

possibly use this issue to obtain sensitive information. (CVE-2014-10402)

It was discovered that the Perl DBI module incorrectly handled certain long

strings. A local attacker could possibly use this issue to cause the DBI

module to crash, resulting in a denial of service. This issue only affected

Ubuntu 18.04 LTS. (CVE-2020-14393)

Topics%20covered

Topics Covered

security advisory denial of service information leak Ubuntu libdbi-perl data access issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS:
  libdbi-perl                     1.643-1ubuntu0.1

Ubuntu 18.04 LTS:
  libdbi-perl                     1.640-1ubuntu0.3

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5030-1

CVE-2014-10402, CVE-2020-14393

Severity
critical
Lowest
Low
Medium
High
Critical

August 04, 2021

Topics%20covered

Topics Covered

security advisory denial of service information leak Ubuntu libdbi-perl data access issue

Package Information

https://launchpad.net/ubuntu/+source/libdbi-perl/1.643-1ubuntu0.1
https://launchpad.net/ubuntu/+source/libdbi-perl/1.640-1ubuntu0.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.