CVE catalog

CVE-2026-73193

Perl DBI module vulnerabilities

[CVE catalog]

Severity
Critical · CVSS 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.65% · Oct 25, 2026

DBI versions before 1.652 for Perl allow a heap out-of-bounds write on 32-bit perl via an integer wraparound in the output buffer size computed by preparse. preparse reserves its output buffer with `newSV(strlen(statement) * 7 + 16)`, budgeting seven output bytes per input byte for the longest ':p99999' expansion. The product is computed in STRLEN, which is 32 bits wide on a 32-bit perl build, so a statement of 613,566,757 bytes multiplies to 4,294,967,299, wraps modulo 2^32 to 3, and reserves 19 bytes. The parser then copies the statement out through a raw pointer with no capacity check, writing the whole 585 MB input past the end of the allocation. The 99,999 placeholder limit does not bound this path, which is reached by ordinary non-placeholder content. Any caller that passes an untrusted statement of that length to preparse on a 32-bit perl gets a heap out-of-bounds write of attacker controlled bytes. Builds with a 64-bit STRLEN are not affected, since the wrap there needs a statement of about 2.3 exabytes.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibdbi-perlsid1.656-1fixed
Debianlibdbi-perlforky1.656-1fixed
Debianlibdbi-perltrixie1.652-2~deb13u1fixed
Debianlibdbi-perltrixie-security1.652-2~deb13u1fixed
Debianlibdbi-perlbookworm1.643-4+deb12u1vulnerable
Debianlibdbi-perlbookworm-security1.643-4+deb12u3fixed
Ubuntulibdbi-perlnoble1.643-4ubuntu0.3fixed
Ubuntulibdbi-perlpro1.642-1vulnerable
Ubuntulibdbi-perlpro1.642-1build1vulnerable
Ubuntulibdbi-perlpro1.643-1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1+esm1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1+esm3fixed
Ubuntulibdbi-perl22.041.643-3build2vulnerable
Ubuntulibdbi-perl22.041.643-3build3vulnerable
Ubuntulibdbi-perl22.041.643-3ubuntu0.1vulnerable
Ubuntulibdbi-perl22.041.643-3ubuntu0.3fixed
Ubuntulibdbi-perl24.041.643-4vulnerable
Ubuntulibdbi-perl24.041.643-4build1vulnerable
Ubuntulibdbi-perl24.041.643-4build2vulnerable
Ubuntulibdbi-perl24.041.643-4build3vulnerable
Ubuntulibdbi-perl24.041.643-4ubuntu0.1vulnerable
Ubuntulibdbi-perl24.041.643-4ubuntu0.3fixed
Ubuntulibdbi-perl26.041.647-1vulnerable
Ubuntulibdbi-perl26.041.647-1build1vulnerable
Ubuntulibdbi-perl26.041.647-1ubuntu0.26.04.1vulnerable
Ubuntulibdbi-perl26.041.647-1ubuntu0.26.04.3fixed
Ubuntulibdbi-perlpro1.642-1vulnerable
Ubuntulibdbi-perlpro1.642-1build1vulnerable
Ubuntulibdbi-perlpro1.643-1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1+esm1vulnerable
Ubuntulibdbi-perlpro1.643-1ubuntu0.1+esm3fixed
Ubuntulibdbi-perl22.041.643-3build2vulnerable
Ubuntulibdbi-perl22.041.643-3build3vulnerable
Ubuntulibdbi-perl22.041.643-3ubuntu0.1vulnerable
Ubuntulibdbi-perl22.041.643-3ubuntu0.3fixed
Ubuntulibdbi-perl24.041.643-4vulnerable
Ubuntulibdbi-perl24.041.643-4build1vulnerable
Ubuntulibdbi-perl24.041.643-4build2vulnerable
Ubuntulibdbi-perl24.041.643-4build3vulnerable
Ubuntulibdbi-perl24.041.643-4ubuntu0.1vulnerable
Ubuntulibdbi-perl24.041.643-4ubuntu0.3fixed
Ubuntulibdbi-perl26.041.647-1vulnerable
Ubuntulibdbi-perl26.041.647-1build1vulnerable
Ubuntulibdbi-perl26.041.647-1ubuntu0.26.04.1vulnerable
Ubuntulibdbi-perl26.041.647-1ubuntu0.26.04.3fixed
Opensuseperl-DBItumbleweed1.653.0-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibdbi-perlsourcesid1.652-1not yet assignedNot reported[1144470]
Debianlibdbi-perlsourceforky1.652-1not yet assignedNot reported[1144470]
Debianlibdbi-perlsourcetrixie1.652-2~deb13u1not yet assignedNot reported[1144470]
Debianlibdbi-perlsourcebookworm1.643-4+deb12u2not yet assignedNot reported[1144470]
Ubuntulibdbi-perldebnoble1.643-4ubuntu0.3Not reportedNot reportedNot reported
Ubuntulibdbi-perldebpro1.643-1ubuntu0.1+esm3Not reportedUSN-8841-1Not reported
Ubuntulibdbi-perldeb22.041.643-3ubuntu0.3Not reportedUSN-8841-1Not reported
Ubuntulibdbi-perldeb24.041.643-4ubuntu0.3Not reportedUSN-8841-1Not reported
Ubuntulibdbi-perldeb26.041.647-1ubuntu0.26.04.3Not reportedUSN-8841-1Not reported
Ubuntulibdbi-perldebpro1.643-1ubuntu0.1+esm3Not reportedUBUNTU-CVE-2026-73193Not reported
Ubuntulibdbi-perldeb22.041.643-3ubuntu0.3Not reportedUBUNTU-CVE-2026-73193Not reported
Ubuntulibdbi-perldeb24.041.643-4ubuntu0.3Not reportedUBUNTU-CVE-2026-73193Not reported
Ubuntulibdbi-perldeb26.041.647-1ubuntu0.26.04.3Not reportedUBUNTU-CVE-2026-73193Not reported
Opensuseperl-DBIrpmtumbleweed1.653.0-1.1Not reportedOPENSUSE-SU-2026:11754-1Not reported

[Debian bug #1144470]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libdbi-perl]Affected
    Details (4)

    • 1.643-4+deb12u1 · amd64 · bookworm

      Affected · Fixed: 1.643-4+deb12u2

      usn · libdbi-perl · debian · bookworm; usn · libdbi-perl · debian · 12

    • 1.643-4+deb12u1 · arm64 · bookworm

      Affected · Fixed: 1.643-4+deb12u2

      usn · libdbi-perl · debian · bookworm; usn · libdbi-perl · debian · 12

    • 1.643-4+deb12u2 · amd64 · bookworm-security

      Fixed · Fixed: 1.643-4+deb12u2

      usn · libdbi-perl · debian · bookworm; usn · libdbi-perl · debian · 12

    • 1.643-4+deb12u2 · arm64 · bookworm-security

      Fixed · Fixed: 1.643-4+deb12u2

      usn · libdbi-perl · debian · bookworm; usn · libdbi-perl · debian · 12

[Debian 13 (Trixie)]

  • [libdbi-perl]Affected
    Details (5)

    • 1.647-1+deb13u1 · amd64 · trixie

      Affected · Fixed: 1.652-2~deb13u1

      usn · libdbi-perl · debian · 13

    • 1.647-1+deb13u1 · arm64 · trixie

      Affected · Fixed: 1.652-2~deb13u1

      usn · libdbi-perl · debian · 13

    • 1.647-1+deb13u1 · amd64 · trixie-security · Historical version

      Affected · Fixed: 1.652-2~deb13u1

      usn · libdbi-perl · debian · 13

    • 1.652-2~deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.652-2~deb13u1

      usn · libdbi-perl · debian · 13

    • 1.652-2~deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.652-2~deb13u1

      usn · libdbi-perl · debian · 13

[openSUSE Tumbleweed]

  • [perl-DBI]Affected

    Source package: [perl-DBI]

    Details (1)

    • 1.651.0-1.3 · x86_64 · tumbleweed

      Affected · Fixed: 1.653.0-1.1

      usn · perl-DBI · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]