kritik
CVE-2026-9698
DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Red Hat (yüksek), AlmaLinux (yüksek), Amazon (yüksek), Azure Linux (yüksek), Oracle (yüksek), Rocky Linux (yüksek), Ubuntu (orta).
Açıklama
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | perl-DBI | 1.643-26.el10_2.1 |
| alma 8 | perl-DBI, perl-DBI:1.641::perl-DBI | 1.641-2.el8_10 ve 1 tane daha |
| alma 9 | perl-DBI | 1.643-9.el9_8.1 |
| alpine 3.24 | perl-dbi | 1.648-r0 |
| alpine edge | perl-dbi | 1.648-r0 |
| amazon linux 2 | perl-DBI, perl-DBI-debuginfo | 1.627-4.amzn2.0.3 |
| amazon linux 2023 | perl-DBI, perl-DBI-debuginfo, perl-DBI-debugsource ve 1 tane daha | 1.648-1.amzn2023.0.1 |
| Azure Linux 3.0 | perl-DBI | 0:1.643-5.azl3 |
| debian 11 | libdbi-perl | 1.643-3+deb11u1 |
| debian 12 | libdbi-perl | 1.643-4+deb12u1 |
| debian 13 | libdbi-perl | 1.647-1+deb13u1 |
| debian 14 | libdbi-perl | 1.648-1 |
37 kaynaktaki 49 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alma 10 | perl-DBI | 1.643-26.el10_2.1 |
| alma 8 | perl-DBI | 1.641-2.el8_10 |
| alma 8 | perl-DBI:1.641::perl-DBI | 1.641-5.module_el8.10.0+4219+13f48a6e |
| alma 9 | perl-DBI | 1.643-9.el9_8.1 |
| alpine 3.24 | perl-dbi | 1.648-r0 |
| alpine edge | perl-dbi | 1.648-r0 |
| amazon linux 2 | perl-DBI | 1.627-4.amzn2.0.3 |
| amazon linux 2 | perl-DBI-debuginfo | 1.627-4.amzn2.0.3 |
| amazon linux 2023 | perl-DBI | 1.648-1.amzn2023.0.1 |
| amazon linux 2023 | perl-DBI-debuginfo | 1.648-1.amzn2023.0.1 |
| amazon linux 2023 | perl-DBI-debugsource | 1.648-1.amzn2023.0.1 |
| amazon linux 2023 | perl-DBI-tests | 1.648-1.amzn2023.0.1 |
| Azure Linux 3.0 | perl-DBI | 0:1.643-5.azl3 |
| debian 11 | libdbi-perl | 1.643-3+deb11u1 |
| debian 12 | libdbi-perl | 1.643-4+deb12u1 |
| debian 13 | libdbi-perl | 1.647-1+deb13u1 |
| debian 14 | libdbi-perl | 1.648-1 |
| echo | libdbi-perl | 1.643-4+deb12u1 |
| Oracle Linux 8 | perl-DBI | 1.641-5.module+el8.10.0+90958+c97fdab0 |
| Oracle Linux 9 | perl-DBI | 1.643-9.el9_8.1 |
| rapidfort alma 10 | perl-DBI | 0:1.643-26.el10_2.1 |
| rapidfort alma 9 | perl-DBI | 0:1.643-9.el9_8.1 |
| rapidfort amazon linux 2023 | perl-DBI | 1.648-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | perl-DBI-tests | 1.648-1.amzn2023.0.1 |
| rapidfort debian 12 | libdbi-perl | 0:1.647-1+deb13u1, 0:1.648-1 |
| rapidfort debian 13 | libdbi-perl | 0:1.647-1+deb13u1, 0:1.648-1 |
| rapidfort fedora 43 | perl-DBI | 1.648-1.fc43 |
| rapidfort fedora 43 | perl-DBI-Coro | 1.648-1.fc43 |
| rapidfort fedora 43 | perl-DBI-tests | 1.648-1.fc43 |
| rapidfort Oracle Linux 10 | perl-DBI | 0:1.643-26.el10_2.1 |
| rapidfort Oracle Linux 9 | perl-DBI | 0:1.643-9.el9_8.1 |
| rapidfort rocky 9 | perl-DBI | 0:1.643-9.el9_8.1 |
| rapidfort ubuntu 20.04 | libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| rapidfort ubuntu 20.04 | rf-libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| rapidfort ubuntu 22.04 | libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| rapidfort ubuntu 22.04 | rf-libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| rapidfort ubuntu 24.04 | libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| rapidfort ubuntu 24.04 | rf-libdbi-perl | 0:1.643-3ubuntu0.1, 0:1.643-4ubuntu0.1, 0:1.647-1ubuntu0.25.10.1 |
| Red Hat | perl-DBI | düzeltme belirtilmemiş |
| rocky 10 | perl-DBI | 0.0.0 |
| rocky 8 | perl-DBI | 1.641-2.el8_10 |
| rocky 8 | perl-DBI:1.641::perl-DBI | 1.641-5.module+el8.10.0+40245+743bde0e |
| rocky 9 | perl-DBI | 1.643-9.el9_8.1 |
| ubuntu 18.04-ESM | libdbi-perl | 1.640-1ubuntu0.3+esm1 |
| ubuntu 20.04-ESM | libdbi-perl | 1.643-1ubuntu0.1+esm1 |
| ubuntu 22.04 | libdbi-perl | 1.643-3ubuntu0.1 |
| ubuntu 24.04 | libdbi-perl | 1.643-4ubuntu0.1 |
| ubuntu 25.10 | libdbi-perl | 1.647-1ubuntu0.25.10.1 |
| ubuntu 26.04 | libdbi-perl | 1.647-1ubuntu0.26.04.1 |
Referanslar
- http://www.openwall.com/lists/oss-security/2026/06/09/9
- https://access.redhat.com/errata/RHSA-2026:38512
- https://access.redhat.com/errata/RHSA-2026:38513
- https://access.redhat.com/errata/RHSA-2026:38901
- https://access.redhat.com/errata/RHSA-2026:53371
- https://access.redhat.com/errata/RHSA-2026:62667
- https://access.redhat.com/security/cve/CVE-2026-9698
- https://bugzilla.redhat.com/2486734
23 referansın hepsi
- https://bugzilla.redhat.com/show_bug.cgi?id=2485464
- https://bugzilla.redhat.com/show_bug.cgi?id=2486734
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-10879
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698
- https://errata.almalinux.org/9/ALSA-2026-38512.html
- https://errata.rockylinux.org/RLSA-2026:38512
- https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch
- https://linux.oracle.com/cve/CVE-2026-9698.html
- https://linux.oracle.com/errata/ELSA-2026-62667-0.html
- https://metacpan.org/release/HMBRAND/DBI-1.648/changes
- https://nvd.nist.gov/vuln/detail/CVE-2026-9698
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9698.json
- https://ubuntu.com/security/notices/USN-8466-1
- https://www.cve.org/CVERecord?id=CVE-2026-9698