CVE-2009-1341: Infoleak
First published: Thu Apr 30 2009(Updated: )
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Debian Libdbd-pg-perl | =1.4.0 | |
| Debian Libdbd-pg-perl | =1.4.4 | |
| Debian Libdbd-pg-perl | =0.95 | |
| Debian Libdbd-pg-perl | =0.62 | |
| Debian Libdbd-pg-perl | =1.3.1 | |
| Debian Libdbd-pg-perl | =0.68 | |
| Debian Libdbd-pg-perl | =1.2.2 | |
| Debian Libdbd-pg-perl | =0.71 | |
| Debian Libdbd-pg-perl | =0.88 | |
| Debian Libdbd-pg-perl | =0.72 | |
| Debian Libdbd-pg-perl | =1.4.6 | |
| Debian Libdbd-pg-perl | =1.2.0 | |
| Debian Libdbd-pg-perl | =0.94 | |
| Debian Libdbd-pg-perl | =0.80 | |
| Debian Libdbd-pg-perl | =0.52 | |
| Debian Libdbd-pg-perl | =1.4.7 | |
| Debian Libdbd-pg-perl | =0.73 | |
| Debian Libdbd-pg-perl | =0.5 | |
| Debian Libdbd-pg-perl | =0.89 | |
| Debian Libdbd-pg-perl | =1.4.8 | |
| Debian Libdbd-pg-perl | =1.0.0 | |
| Debian Libdbd-pg-perl | =0.65 | |
| Debian Libdbd-pg-perl | =0.3 | |
| Debian Libdbd-pg-perl | =0.97 | |
| Debian Libdbd-pg-perl | =0.91 | |
| Debian Libdbd-pg-perl | =0.69 | |
| Debian Libdbd-pg-perl | =0.87 | |
| Debian Libdbd-pg-perl | =0.2 | |
| Debian Libdbd-pg-perl | =0.99 | |
| Debian Libdbd-pg-perl | =0.82 | |
| Debian Libdbd-pg-perl | =1.4.1 | |
| Debian Libdbd-pg-perl | =0.85 | |
| Debian Libdbd-pg-perl | =0.66 | |
| Debian Libdbd-pg-perl | =0.96 | |
| Debian Libdbd-pg-perl | =0.83 | |
| Debian Libdbd-pg-perl | <=1.4.9 | |
| Debian Libdbd-pg-perl | =0.90 | |
| Debian Libdbd-pg-perl | =0.51 | |
| Debian Libdbd-pg-perl | =1.0.1 | |
| Debian Libdbd-pg-perl | =1.3.2 | |
| Debian Libdbd-pg-perl | =0.81 | |
| Debian Libdbd-pg-perl | =0.92 | |
| Debian Libdbd-pg-perl | =0.64 | |
| Debian Libdbd-pg-perl | =1.4.3 | |
| Debian Libdbd-pg-perl | =0.98 | |
| Debian Libdbd-pg-perl | =1.4.5 | |
| Debian Libdbd-pg-perl | =1.2.1 | |
| Debian Libdbd-pg-perl | =0.1 | |
| Debian Libdbd-pg-perl | =1.4.2 | |
| Debian Libdbd-pg-perl | =0.67 | |
| Debian Libdbd-pg-perl | =0.86 | |
| Debian Libdbd-pg-perl | =0.4 | |
| Debian Libdbd-pg-perl | =0.63 | |
| Debian Libdbd-pg-perl | =0.93 | |
| Debian Libdbd-pg-perl | =0.61 | |
| Debian Libdbd-pg-perl | =0.84 | |
| Debian Libdbd-pg-perl | =0.70 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rt.cpan.org/Public/Bug/Display.html?id=21392
- https://launchpad.net/bugs/cve/2009-1341
- http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
- http://www.debian.org/security/2009/dsa-1780
- http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
- http://secunia.com/advisories/34909
- http://www.securityfocus.com/bid/34757
- http://www.redhat.com/support/errata/RHSA-2009-0479.html
- http://secunia.com/advisories/35058
- http://www.redhat.com/support/errata/RHSA-2009-1067.html
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
- http://secunia.com/advisories/35685
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50387
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- collector/launchpad-cve
- source/Launchpad
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/debian
- canonical/debian libdbd-pg-perl
- version/debian libdbd-pg-perl/1.4.0
- version/debian libdbd-pg-perl/1.4.4
- version/debian libdbd-pg-perl/0.95
- version/debian libdbd-pg-perl/0.62
- version/debian libdbd-pg-perl/1.3.1
- version/debian libdbd-pg-perl/0.68
- version/debian libdbd-pg-perl/1.2.2
- version/debian libdbd-pg-perl/0.71
- version/debian libdbd-pg-perl/0.88
- version/debian libdbd-pg-perl/0.72
- version/debian libdbd-pg-perl/1.4.6
- version/debian libdbd-pg-perl/1.2.0
- version/debian libdbd-pg-perl/0.94
- version/debian libdbd-pg-perl/0.80
- version/debian libdbd-pg-perl/0.52
- version/debian libdbd-pg-perl/1.4.7
- version/debian libdbd-pg-perl/0.73
- version/debian libdbd-pg-perl/0.5
- version/debian libdbd-pg-perl/0.89
- version/debian libdbd-pg-perl/1.4.8
- version/debian libdbd-pg-perl/1.0.0
- version/debian libdbd-pg-perl/0.65
- version/debian libdbd-pg-perl/0.3
- version/debian libdbd-pg-perl/0.97
- version/debian libdbd-pg-perl/0.91
- version/debian libdbd-pg-perl/0.69
- version/debian libdbd-pg-perl/0.87
- version/debian libdbd-pg-perl/0.2
- version/debian libdbd-pg-perl/0.99
- version/debian libdbd-pg-perl/0.82
- version/debian libdbd-pg-perl/1.4.1
- version/debian libdbd-pg-perl/0.85
- version/debian libdbd-pg-perl/0.66
- version/debian libdbd-pg-perl/0.96
- version/debian libdbd-pg-perl/0.83
- version/debian libdbd-pg-perl/1.4.9
- version/debian libdbd-pg-perl/0.90
- version/debian libdbd-pg-perl/0.51
- version/debian libdbd-pg-perl/1.0.1
- version/debian libdbd-pg-perl/1.3.2
- version/debian libdbd-pg-perl/0.81
- version/debian libdbd-pg-perl/0.92
- version/debian libdbd-pg-perl/0.64
- version/debian libdbd-pg-perl/1.4.3
- version/debian libdbd-pg-perl/0.98
- version/debian libdbd-pg-perl/1.4.5
- version/debian libdbd-pg-perl/1.2.1
- version/debian libdbd-pg-perl/0.1
- version/debian libdbd-pg-perl/1.4.2
- version/debian libdbd-pg-perl/0.67
- version/debian libdbd-pg-perl/0.86
- version/debian libdbd-pg-perl/0.4
- version/debian libdbd-pg-perl/0.63
- version/debian libdbd-pg-perl/0.93
- version/debian libdbd-pg-perl/0.61
- version/debian libdbd-pg-perl/0.84
- version/debian libdbd-pg-perl/0.70