CVE-2019-20919
Medium
Description
An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.
SeverityMedium
CVSS4.7
Exploit probability—
Product
Perl Dbi
PublishedSep 17, 2020
First seenSep 17, 2020
How to fix
Update
- perl dbi1.643 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| perl dbi | v < 1.643 | 1.643 |
| fedoraproject fedora | 31 | — |
| canonical ubuntu_linux | 12.04, 14.04, 16.04, 18.04 | — |
| debian debian_linux | 9.0 | — |
| opensuse leap | 15.1, 15.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.