CVE-2020-14392

perl-dbi: Memory corruption in XS functions when Perl stack is reallocated

Loading…

Severity

Low

Red Hat Product Security

6.1

CVSS 3.1

Review impact separately from score.

Published · July 31, 2019

Updated · November 22, 2025

Description

An untrusted pointer dereference flaw was found in Perl-DBI before version 1.643. This flaw allows a local attacker who can manipulate calls to dbd_db_login6_sv() to cause memory corruption. The highest threat from this vulnerability is to system availability.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

CWE-822 · Untrusted Pointer Dereference