Summary
It was discovered that the Perl DBI module did not correctly handle
certain integer arithmetic operations. An attacker could possibly use
this issue to cause a denial of service or execute arbitrary code.
(CVE-2026-73193, CVE-2026-73194)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libdbi-perl | 1.643-3ubuntu0.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | libdbi-perl | 1.643-4ubuntu0.3 |
| Ubuntu · 26.04 LTS 26.04:LTS | libdbi-perl | 1.647-1ubuntu0.26.04.3 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libdbi-perl | 1.630-1ubuntu0.1~esm8 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | libdbi-perl | 1.634-1ubuntu0.2+esm4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | libdbi-perl | 1.640-1ubuntu0.3+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | libdbi-perl | 1.643-1ubuntu0.1+esm3 |
Vulnerabilities 2
-
Critical 9.8
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves its output buffer with `newSV(strlen(statement) * 7 + 16)`, budgeting seven output b…
-
Critical 9.1
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse
DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' br…