CVE-2026-9698: falha de alta gravidade em HMBRAND DBI
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.5%
DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.
Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.
Attackers that can influence the error text in an application can trigger a buffer overflow.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
HMBRAND · DBICVEs relacionadas — HMBRAND DBI
No mesmo produto, das mais perigosas para as menos.
CVE-2026-60082CRITICALDBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowEPSS 0.7%CVE-2026-10879CRITICALDBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 bindersEPSS 0.5%CVE-2026-14739CRITICALDBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholdersEPSS 0.4%CVE-2026-14740CRITICALDBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL commentEPSS 0.4%
Referências
https://access.redhat.com/errata/RHSA-2026:38512https://access.redhat.com/errata/RHSA-2026:38513https://access.redhat.com/errata/RHSA-2026:38901https://access.redhat.com/errata/RHSA-2026:53371https://access.redhat.com/errata/RHSA-2026:62667https://access.redhat.com/security/cve/CVE-2026-9698https://bugzilla.redhat.com/show_bug.cgi?id=2486734https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patchhttps://metacpan.org/release/HMBRAND/DBI-1.648/changeshttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9698.jsonhttp://www.openwall.com/lists/oss-security/2026/06/09/9