Back to Database
Status published
Medium
CVE-2009-1341
Memory leak in the dequote_bytea function in quote.c in the...
Vulnerability Description
Memory leak in the dequote_bytea function in quote.c in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.0.0 for Perl allows context-dependent attackers to cause a denial of service (memory consumption) by fetching data with BYTEA columns.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-1341
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.redhat.com/support/errata/RHSA-2009-1067.html
- http://www.securityfocus.com/bid/34757
- http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz
- https://launchpad.net/bugs/cve/2009-1341
- http://secunia.com/advisories/34909
- http://www.redhat.com/support/errata/RHSA-2009-0479.html
- http://secunia.com/advisories/35685
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9680
- http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.13.1/Changes
- http://www.debian.org/security/2009/dsa-1780
- http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html
- http://secunia.com/advisories/35058
- http://rt.cpan.org/Public/Bug/Display.html?id=21392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50387
More from debian
View All →CVE-2022-48174
There is a stack overflow vulnerability in ash.c:6030 in busybox...
Critical
9.8
CVE-2021-38172
perM 0.4.0 has a Buffer Overflow related to strncpy. (Debian...
Critical
9.8
CVE-2021-36086
The CIL compiler in SELinux 3.2 has a use-after-free in...
Low
3.3
CVE-2021-31799
In RDoc 3.11 through 6.x before 6.3.1, as distributed with...
Unknown
0
CVE-2021-28374
The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library...
High
7.5
Affected Vendor
debian
View all reports →Affected Software
libdbd-pg-perl
Vulnerable Versions:
0, 0.1, 0.2, 0.3, 0.4, 0.5, 0.51, 0.52, 0.61, 0.62, 0.63, 0.64, 0.65, 0.66, 0.67, 0.68, 0.69, 0.70, 0.71, 0.72, 0.73, 0.80, 0.81, 0.82, 0.83, 0.84, 0.85, 0.86, 0.87, 0.88, 0.89, 0.90, 0.91, 0.92, 0.93, 0.94, 0.95, 0.96, 0.97, 0.98, 0.99, 1.0.0, 1.0.1, 1.2.0, 1.2.1, 1.2.2, 1.3.1, 1.3.2, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.8
Timeline
Official Publish:
April 30th, 2009
Last Modified:
August 7th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.