by Kastro CVE-2026-9698
HMBRAND DBI — DBI versions before 1.648 for Perl saved errors in a limited-sized buffer
Description · from the CVE record
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.
Affected
ProductAffectedFixed inSource
DBI< 1.6481.648CNA
Red Hat Enterprise Linux 10see advisory0:1.643-26.el10_2.1redhat-SADP
Red Hat Enterprise Linux 8see advisory8100020260624081239.69ef70f8redhat-SADP
Red Hat Enterprise Linux 9see advisory0:1.643-9.el9_8.1redhat-SADP
Red Hat Insights proxy 1.5see advisory1786433656redhat-SADP
Red Hat Enterprise Linux 6see advisory–redhat-SADP
Red Hat Enterprise Linux 7see advisory–redhat-SADP
Red Hat Enterprise Linux 8see advisory–redhat-SADP
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CISA ADP7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial