CVE catalog

CVE-2020-14392

libdbi-perl: CVE-2020-14392

[CVE catalog]

Severity
High · CVSS 7.4CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.55% · Oct 25, 2026

An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able to manipulate calls to dbd_db_login6_sv() could cause memory corruption, affecting the service's availability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibdbi-perlsid1.656-1fixed
Debianlibdbi-perlforky1.656-1fixed
Debianlibdbi-perltrixie1.652-2~deb13u1fixed
Debianlibdbi-perltrixie-security1.652-2~deb13u1fixed
Debianlibdbi-perlbookworm1.643-4+deb12u1fixed
Debianlibdbi-perlbookworm-security1.643-4+deb12u3fixed
Alpineperl-dbi3.121.643-r0fixed
Alpineperl-dbi3.131.643-r0fixed
Alpineperl-dbi3.141.643-r0fixed
Alpineperl-dbi3.151.643-r0fixed
Alpineperl-dbi3.161.643-r0fixed
Alpineperl-dbi3.171.643-r0fixed
Alpineperl-dbi3.181.643-r0fixed
Alpineperl-dbi3.191.643-r0fixed
Alpineperl-dbi3.201.643-r0fixed
Alpineperl-dbi3.211.643-r0fixed
Alpineperl-dbi3.221.643-r0fixed
Alpineperl-dbi3.231.643-r0fixed
Alpineperl-dbi3.241.643-r0fixed
Ubuntulibdbi-perlpro1.627-1vulnerable
Ubuntulibdbi-perlpro1.628-1vulnerable
Ubuntulibdbi-perlpro1.630-1vulnerable
Ubuntulibdbi-perlpro1.630-1ubuntu0.1~esm1fixed
Ubuntulibdbi-perl16.041.633-1vulnerable
Ubuntulibdbi-perl16.041.634-1vulnerable
Ubuntulibdbi-perl16.041.634-1build1vulnerable
Ubuntulibdbi-perl16.041.634-1ubuntu0.1fixed
Ubuntulibdbi-perl18.041.637-1vulnerable
Ubuntulibdbi-perl18.041.639-1vulnerable
Ubuntulibdbi-perl18.041.640-1vulnerable
Ubuntulibdbi-perl18.041.640-1ubuntu0.1fixed
Opensuseperl-DBIleap 15.21.642-lp152.2.3.1fixed
Ubuntulibdbi-perlpro1.627-1vulnerable
Ubuntulibdbi-perlpro1.628-1vulnerable
Ubuntulibdbi-perlpro1.630-1vulnerable
Ubuntulibdbi-perlpro1.630-1ubuntu0.1~esm1fixed
Ubuntulibdbi-perl16.041.633-1vulnerable
Ubuntulibdbi-perl16.041.634-1vulnerable
Ubuntulibdbi-perl16.041.634-1build1vulnerable
Ubuntulibdbi-perl16.041.634-1ubuntu0.1fixed
Ubuntulibdbi-perl18.041.637-1vulnerable
Ubuntulibdbi-perl18.041.639-1vulnerable
Ubuntulibdbi-perl18.041.640-1vulnerable
Ubuntulibdbi-perl18.041.640-1ubuntu0.1fixed
Opensuseperl-DBIleap 15.11.639-lp151.3.7.1fixed
Suseperl-DBIlinux enterprise module for basesystem 15 sp11.639-3.8.1fixed
Suseperl-DBIlinux enterprise high performance computing 15-espos1.639-3.8.1fixed
Suseperl-DBIlinux enterprise high performance computing 15-ltss1.639-3.8.1fixed
Suseperl-DBIlinux enterprise server 15-ltss1.639-3.8.1fixed
Suseperl-DBIlinux enterprise server for sap applications 151.639-3.8.1fixed
Suseperl-DBIlinux enterprise point of sale 11 sp31.607-3.3.1fixed
Suseperl-DBIlinux enterprise server 11 sp4-ltss1.607-3.3.1fixed
Suseperl-DBIhpe helion openstack 81.628-5.3.1fixed
Suseperl-DBIopenstack cloud 71.628-5.3.1fixed
Suseperl-DBIopenstack cloud 81.628-5.3.1fixed
Suseperl-DBIopenstack cloud 91.628-5.3.1fixed
Suseperl-DBIopenstack cloud crowbar 81.628-5.3.1fixed
Suseperl-DBIopenstack cloud crowbar 91.628-5.3.1fixed
Suseperl-DBIlinux enterprise server for sap applications 12 sp21.628-5.3.1fixed
Suseperl-DBIlinux enterprise server for sap applications 12 sp31.628-5.3.1fixed
Suseperl-DBIlinux enterprise server for sap applications 12 sp41.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp2-ltss1.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp2-bcl1.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp3-ltss1.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp3-bcl1.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp4-ltss1.628-5.3.1fixed
Suseperl-DBIlinux enterprise server 12 sp51.628-5.3.1fixed
Suseperl-DBIlinux enterprise server for sap applications 12 sp51.628-5.3.1fixed
Suseperl-DBIenterprise storage 51.628-5.3.1fixed
Suseperl-DBIlinux enterprise module for basesystem 15 sp21.642-3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibdbi-perlsourcesid1.643-1not yet assignedNot reportedNot reported
Debianlibdbi-perlsourceforky1.643-1not yet assignedNot reportedNot reported
Debianlibdbi-perlsourcetrixie1.643-1not yet assignedNot reportedNot reported
Debianlibdbi-perlsourcebookworm1.643-1not yet assignedNot reportedNot reported
Alpineperl-dbiapk3.121.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.131.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.141.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.151.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.161.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.171.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.181.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.191.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.201.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.211.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.221.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.231.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Alpineperl-dbiapk3.241.643-r0Not reportedALPINE-CVE-2020-14392Not reported
Ubuntulibdbi-perldebpro1.630-1ubuntu0.1~esm1Not reportedUSN-4503-1Not reported
Ubuntulibdbi-perldeb16.041.634-1ubuntu0.1Not reportedUSN-4503-1Not reported
Ubuntulibdbi-perldeb18.041.640-1ubuntu0.1Not reportedUSN-4503-1Not reported
Opensuseperl-DBIrpmleap 15.21.642-lp152.2.3.1Not reportedOPENSUSE-SU-2020:1483-1Not reported
Ubuntulibdbi-perldebpro1.630-1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2020-14392Not reported
Ubuntulibdbi-perldeb16.041.634-1ubuntu0.1Not reportedUBUNTU-CVE-2020-14392Not reported
Ubuntulibdbi-perldeb18.041.640-1ubuntu0.1Not reportedUBUNTU-CVE-2020-14392Not reported
Opensuseperl-DBIrpmleap 15.11.639-lp151.3.7.1Not reportedOPENSUSE-SU-2020:1502-1Not reported
Suseperl-DBIrpmlinux enterprise module for basesystem 15 sp11.639-3.8.1Not reportedSUSE-SU-2020:2645-1Not reported
Suseperl-DBIrpmlinux enterprise high performance computing 15-espos1.639-3.8.1Not reportedSUSE-SU-2020:2645-1Not reported
Suseperl-DBIrpmlinux enterprise high performance computing 15-ltss1.639-3.8.1Not reportedSUSE-SU-2020:2645-1Not reported
Suseperl-DBIrpmlinux enterprise server 15-ltss1.639-3.8.1Not reportedSUSE-SU-2020:2645-1Not reported
Suseperl-DBIrpmlinux enterprise server for sap applications 151.639-3.8.1Not reportedSUSE-SU-2020:2645-1Not reported
Suseperl-DBIrpmlinux enterprise point of sale 11 sp31.607-3.3.1Not reportedSUSE-SU-2020:14493-1Not reported
Suseperl-DBIrpmlinux enterprise server 11 sp4-ltss1.607-3.3.1Not reportedSUSE-SU-2020:14493-1Not reported
Suseperl-DBIrpmhpe helion openstack 81.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmopenstack cloud 71.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmopenstack cloud 81.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmopenstack cloud 91.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmopenstack cloud crowbar 81.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmopenstack cloud crowbar 91.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server for sap applications 12 sp21.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server for sap applications 12 sp31.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server for sap applications 12 sp41.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp2-ltss1.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp2-bcl1.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp3-ltss1.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp3-bcl1.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp4-ltss1.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server 12 sp51.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise server for sap applications 12 sp51.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmenterprise storage 51.628-5.3.1Not reportedSUSE-SU-2020:2661-1Not reported
Suseperl-DBIrpmlinux enterprise module for basesystem 15 sp21.642-3.3.1Not reportedSUSE-SU-2020:2646-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libdbi-perl]Unknown
    Details (4)

    • 1.643-4+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · bookworm; dsa · libdbi-perl · debian · 12

    • 1.643-4+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · bookworm; dsa · libdbi-perl · debian · 12

    • 1.643-4+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · bookworm; dsa · libdbi-perl · debian · 12

    • 1.643-4+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · bookworm; dsa · libdbi-perl · debian · 12

[Debian 13 (Trixie)]

  • [libdbi-perl]Unknown
    Details (5)

    • 1.647-1+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · 13

    • 1.647-1+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · 13

    • 1.647-1+deb13u1 · amd64 · trixie-security · Historical version

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · 13

    • 1.652-2~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · 13

    • 1.652-2~deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.643-1

      dsa · libdbi-perl · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]