CyberRota Analysis
AI-GeneratedDBI versions prior to 1.650 for Perl are vulnerable due to an out-of-bounds read during the preparse method when handling SQL comments, which can lead to memory faults in hardened builds and unpredictable behavior in standard builds. This critical vulnerability poses a significant risk to applications that rely on DBI for database interactions, making it essential for developers and system administrators using affected versions to prioritize immediate updates to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment. The preparse method normalises SQL and removes comments. When the SQL starts with a comment line, the deletion of that line during normalisation led to an out-of-bounds read by one byte. The result is a fault on memory-hardened builds and nondeterministic newline retention on normal builds.
Related CVEs
Other vulnerabilities affecting the same vendor(s)