{"dataType": "CVE_RECORD", "containers": {"adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "perl-DBI", "platforms": ["cpe:/o:redhat:enterprise_linux:6"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "A flaw was found in DBI, a Perl database interface. This vulnerability allows an attacker to trigger a buffer overflow by manipulating error messages within an application. When specific error handling options are active, an attacker can provide oversized error text, which may lead to arbitrary code execution or a denial of service (DoS). \n            Exploitation of this vulnerability requires that an attacker can provide values to an endpoint using perl-DBI which trigger certain errors. The attacker has no means of directly controlling the location and thus consequences of the buffer overflow, making the most likely outcome a denial-of-service due to corruption of the application's memory.\n            Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users are advised to identify network-accessible applications which use perl-DBI and ensure that only trusted users have access to those applications."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-06-09T07:22:00Z", "x_subShortName": "redhat_6"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "perl-DBI", "platforms": ["cpe:/o:redhat:enterprise_linux:7"], "defaultStatus": "affected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "A flaw was found in DBI, a Perl database interface. This vulnerability allows an attacker to trigger a buffer overflow by manipulating error messages within an application. When specific error handling options are active, an attacker can provide oversized error text, which may lead to arbitrary code execution or a denial of service (DoS). \n            Exploitation of this vulnerability requires that an attacker can provide values to an endpoint using perl-DBI which trigger certain errors. The attacker has no means of directly controlling the location and thus consequences of the buffer overflow, making the most likely outcome a denial-of-service due to corruption of the application's memory.\n            Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Users are advised to identify network-accessible applications which use perl-DBI and ensure that only trusted users have access to those applications."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-06-09T07:22:00Z", "x_subShortName": "redhat_7"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"medium\"}"}}}], "affected": [{"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.640-1ubuntu0.3+esm1", "versionType": "custom"}], "platforms": ["bionic"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.643-1ubuntu0.1+esm1", "versionType": "custom"}], "platforms": ["focal"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.643-3ubuntu0.1", "versionType": "custom"}], "platforms": ["jammy"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.643-4ubuntu0.1", "versionType": "custom"}], "platforms": ["noble"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.647-1ubuntu0.26.04.1", "versionType": "custom"}], "platforms": ["resolute"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.630-1ubuntu0.1~esm6", "versionType": "custom"}], "platforms": ["trusty"], "defaultStatus": "unaffected"}, {"vendor": "canonical", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.634-1ubuntu0.2+esm2", "versionType": "custom"}], "platforms": ["xenial"], "defaultStatus": "unaffected"}], "references": [{"url": "https://ubuntu.com/security/CVE-2026-9698"}, {"url": "https://ubuntu.com/security/notices/USN-8466-1"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow."}], "providerMetadata": {"orgId": "cc1ad9ee-3454-478d-9317-d3e869d708bc", "shortName": "canonical", "dateUpdated": "2026-06-09T08:16:00Z", "x_subShortName": "canonical"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"not yet assigned\"}"}}}], "affected": [{"vendor": "debian", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.643-4+deb12u1", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libdbi-perl-dbgsym", "versions": [{"status": "affected", "version": "0", "lessThan": "1.643-4+deb12u1", "versionType": "deb"}], "platforms": ["bookworm"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1", "versionType": "deb"}], "platforms": ["forky", "sid"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libdbi-perl-dbgsym", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1", "versionType": "deb"}], "platforms": ["forky", "sid"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libdbi-perl", "versions": [{"status": "affected", "version": "0", "lessThan": "1.647-1+deb13u1", "versionType": "deb"}], "platforms": ["trixie"], "defaultStatus": "unaffected"}, {"vendor": "debian", "product": "libdbi-perl-dbgsym", "versions": [{"status": "affected", "version": "0", "lessThan": "1.647-1+deb13u1", "versionType": "deb"}], "platforms": ["trixie"], "defaultStatus": "unaffected"}], "references": [{"url": "https://security-tracker.debian.org/tracker/CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.  Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.  Attackers that can influence the error text in an application can trigger a buffer overflow."}], "providerMetadata": {"orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian", "dateUpdated": "2026-06-11T00:00:00.000Z", "x_subShortName": "debian"}}, {"credits": [{"lang": "en", "value": "packager@almalinux.org"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "almalinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:10"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698", "name": "CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.  \n\nSecurity Fix(es):  \n\n  * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n"}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000001", "shortName": "almalinux", "dateUpdated": "2026-07-13T00:00:00Z", "x_subShortName": "alma_10"}}, {"credits": [{"lang": "en", "value": "packager@almalinux.org"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "almalinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module_el8.10.0+4218+c616d9bd", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:8"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698", "name": "CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.  \n\nSecurity Fix(es):  \n\n  * perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. (CVE-2026-10879)\n  * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n  * DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380)\n  * DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n"}, {"lang": "en", "value": "The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.  \n\nSecurity Fix(es):  \n\n  * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n"}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000001", "shortName": "almalinux", "dateUpdated": "2026-07-13T00:00:00Z", "x_subShortName": "alma_8"}}, {"credits": [{"lang": "en", "value": "packager@almalinux.org"}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "almalinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:almalinux:almalinux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698", "name": "CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.  \n\nSecurity Fix(es):  \n\n  * DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n"}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000001", "shortName": "almalinux", "dateUpdated": "2026-07-13T00:00:00Z", "x_subShortName": "alma_9"}}, {"metrics": [{"other": {"type": "Unknown", "content": {"data": "{\"description\":\"high\"}"}}}], "affected": [{"vendor": "fedora", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.648-1.fc43", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:43"], "defaultStatus": "unaffected"}, {"vendor": "fedora", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.648-1.fc44", "versionType": "rpm"}], "platforms": ["cpe:/o:fedoraproject:fedora:44"], "defaultStatus": "unaffected"}], "references": [{"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-134fcb8549"}, {"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-d74dd170ab"}], "descriptions": [{"lang": "en", "value": "perl-DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution"}], "providerMetadata": {"orgId": "92fb86c3-55a5-4fb5-9c3f-4757b9e96dc5", "shortName": "fedora", "dateUpdated": "2026-06-26T00:58:32Z", "x_subShortName": "fedora"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"IMPORTANT\"}"}}}], "affected": [{"vendor": "oraclelinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:10"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+90956+569bae39", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+90958+c97fdab0", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:8"], "defaultStatus": "unaffected"}, {"vendor": "oraclelinux", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:oracle:linux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://linux.oracle.com/cve/CVE-2026-9698.html"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000006", "shortName": "oraclelinux", "dateUpdated": "2026-07-13T00:00:00Z", "x_subShortName": "oraclelinux"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "unaffected"}, {"vendor": "redhat", "product": "perl-DBI-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:10"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486734"}, {"url": "https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch"}, {"url": "https://metacpan.org/release/HMBRAND/DBI-1.648/changes"}, {"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9698"}, {"url": "https://www.cve.org/CVERecord?id=CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "A flaw was found in DBI, a Perl database interface. This vulnerability allows an attacker to trigger a buffer overflow by manipulating error messages within an application. When specific error handling options are active, an attacker can provide oversized error text, which may lead to arbitrary code execution or a denial of service (DoS)."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-06-09T07:22:25Z", "x_subShortName": "redhat_10"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+24438+96f61291", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+24438+dc2220dd", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:8"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:38901"}, {"url": "https://access.redhat.com/errata/RHSA-2026:62667"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.\n\nSecurity Fix(es):\n\n* perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution. (CVE-2026-10879)\n\n* DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\n* DBI: DBI: Arbitrary code execution via caller-influenced Profile attribute (CVE-2026-14380)\n\n* DBI: DBI: Heap overflow when preparsing SQL statements with excessive placeholders (CVE-2026-14739)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}, {"lang": "en", "value": "The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.\n\nSecurity Fix(es):\n\n* DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-06-09T07:22:00Z", "x_subShortName": "redhat_8"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "redhat", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:redhat:enterprise_linux:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:38512"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI is a database access Application Programming Interface (API) for the Perl Language. The DBI API Specification defines a set of functions, variables and conventions that provide a consistent database interface independent of the actual database being used.\n\nSecurity Fix(es):\n\n* DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-06-09T07:22:00Z", "x_subShortName": "redhat_9"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "rocky", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:10"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:10"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-26.el10_2.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:10"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+1df7f06b", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+6310859f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+743bde0e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+e0d97b2a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+1df7f06b", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+6310859f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+743bde0e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+e0d97b2a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.641-2.el8_10", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+1df7f06b", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+6310859f", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+743bde0e", "versionType": "rpm"}, {"status": "affected", "version": "0", "lessThan": "0:1.641-5.module+el8.10.0+40245+e0d97b2a", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:8"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}, {"vendor": "rocky", "product": "perl-DBI-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.643-9.el9_8.1", "versionType": "rpm"}], "platforms": ["cpe:/o:rocky:rocky:9"], "defaultStatus": "unaffected"}], "references": [{"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2485464"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486734"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497915"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2497916"}], "descriptions": [{"lang": "en", "value": "DBI: DBI: Buffer overflow in error handling can lead to arbitrary code execution (CVE-2026-9698)"}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000004", "shortName": "rocky", "dateUpdated": "2026-07-14T12:03:23Z", "x_subShortName": "rocky"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.642-150200.3.12.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:23.4", "cpe:/o:suse:oes-release:24.4", "cpe:/o:suse:sle_hpc:15:sp4", "cpe:/o:suse:sle_hpc:15:sp5", "cpe:/o:suse:sles-ltss:15:sp4", "cpe:/o:suse:sles-ltss:15:sp5", "cpe:/o:suse:sles:15:sp4", "cpe:/o:suse:sles:15:sp5", "cpe:/o:suse:sles_sap:15:sp4", "cpe:/o:suse:sles_sap:15:sp5", "cpe:/o:suse:sles_teradata:15:sp4"], "defaultStatus": "unaffected"}, {"vendor": "suse", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.647.0-150600.12.11.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles-ltss:15:sp6", "cpe:/o:suse:sles:15:sp6", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp6", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1267957"}, {"lang": "en", "value": "SUSE bug 1279550"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698", "name": "Mitre CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006954.html", "name": "RHSA-2026:38512"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006943.html", "name": "RHSA-2026:38513"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007006.html", "name": "RHSA-2026:38901"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007696.html", "name": "RHSA-2026:62667"}, {"url": "https://www.suse.com/security/cve/CVE-2026-9698", "name": "SUSE CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047701.html", "name": "SUSE-SU-2026:22257-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047809.html", "name": "SUSE-SU-2026:22330-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047976.html", "name": "SUSE-SU-2026:2748-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047975.html", "name": "SUSE-SU-2026:2749-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047974.html", "name": "SUSE-SU-2026:2750-1"}], "descriptions": [{"lang": "en", "value": "\n    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-07-03T00:00:00Z", "x_subShortName": "suse_server_15"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.647.0-150600.12.11.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:oes-release:25.4", "cpe:/o:suse:sle-module-basesystem:15:sp7", "cpe:/o:suse:sled:15:sp7", "cpe:/o:suse:sles:15:sp7", "cpe:/o:suse:sles_sap:15:sp7"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1267957"}, {"lang": "en", "value": "SUSE bug 1279550"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698", "name": "Mitre CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006954.html", "name": "RHSA-2026:38512"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006943.html", "name": "RHSA-2026:38513"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007006.html", "name": "RHSA-2026:38901"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007696.html", "name": "RHSA-2026:62667"}, {"url": "https://www.suse.com/security/cve/CVE-2026-9698", "name": "SUSE CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047701.html", "name": "SUSE-SU-2026:22257-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047809.html", "name": "SUSE-SU-2026:22330-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047976.html", "name": "SUSE-SU-2026:2748-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047975.html", "name": "SUSE-SU-2026:2749-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047974.html", "name": "SUSE-SU-2026:2750-1"}], "descriptions": [{"lang": "en", "value": "\n    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-07-03T00:00:00Z", "x_subShortName": "suse_desktop_15"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "suse", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "0:1.647.0-160000.3.1", "versionType": "rpm"}], "platforms": ["cpe:/o:suse:sles:16.0", "cpe:/o:suse:sles_sap:16.0"], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "SUSE bug 1267957"}, {"lang": "en", "value": "SUSE bug 1279550"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698", "name": "Mitre CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006954.html", "name": "RHSA-2026:38512"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006943.html", "name": "RHSA-2026:38513"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007006.html", "name": "RHSA-2026:38901"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007696.html", "name": "RHSA-2026:62667"}, {"url": "https://www.suse.com/security/cve/CVE-2026-9698", "name": "SUSE CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047701.html", "name": "SUSE-SU-2026:22257-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047809.html", "name": "SUSE-SU-2026:22330-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047976.html", "name": "SUSE-SU-2026:2748-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047975.html", "name": "SUSE-SU-2026:2749-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047974.html", "name": "SUSE-SU-2026:2750-1"}], "descriptions": [{"lang": "en", "value": "\n    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-07-02T00:00:00Z", "x_subShortName": "suse_server_16"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "amazon", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "1.627-4.amzn2.0.3", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "1.627-4.amzn2.0.3", "versionType": "rpm"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000000", "shortName": "alas", "dateUpdated": "2026-06-22T09:00:00Z", "x_subShortName": "alas_2"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.1, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "amazon", "product": "perl-DBI", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1.amzn2023.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "perl-DBI-debuginfo", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1.amzn2023.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "perl-DBI-debugsource", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1.amzn2023.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}, {"vendor": "amazon", "product": "perl-DBI-tests", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648-1.amzn2023.0.1", "versionType": "rpm"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit. Attackers that can influence the error text in an application can trigger a buffer overflow."}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000000", "shortName": "alas", "dateUpdated": "2026-06-22T09:00:00Z", "x_subShortName": "alas_2023"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "Unknown", "content": {"data": "{\"description\":\"Important\"}"}}}], "affected": [{"vendor": "unknown", "product": "unknown", "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "SUSE bug 1267957"}, {"lang": "en", "value": "SUSE bug 1279550"}], "references": [{"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9698", "name": "Mitre CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006954.html", "name": "RHSA-2026:38512"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/006943.html", "name": "RHSA-2026:38513"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-July/007006.html", "name": "RHSA-2026:38901"}, {"url": "https://lists.suse.com/pipermail/suse-liberty-linux-updates/2026-September/007696.html", "name": "RHSA-2026:62667"}, {"url": "https://www.suse.com/security/cve/CVE-2026-9698", "name": "SUSE CVE-2026-9698"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047701.html", "name": "SUSE-SU-2026:22257-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047809.html", "name": "SUSE-SU-2026:22330-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047976.html", "name": "SUSE-SU-2026:2748-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047975.html", "name": "SUSE-SU-2026:2749-1"}, {"url": "https://lists.suse.com/pipermail/sle-updates/2026-July/047974.html", "name": "SUSE-SU-2026:2750-1"}], "descriptions": [{"lang": "en", "value": "\n    DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow.\n    "}], "providerMetadata": {"orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb", "shortName": "suse", "dateUpdated": "2026-07-03T00:00:00Z", "x_subShortName": "suse_server_12"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:2.3:a:perl:dbi:*:*:*:*:*:*:*:*"], "vendor": "perl", "product": "dbi", "versions": [{"status": "affected", "version": "0", "lessThan": "1.648", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/06/09/9", "tags": ["mailing-list", "third-party-advisory"]}, {"url": "https://github.com/perl5-dbi/dbi/commit/bfe5d73c162d2d1f761a639a0aa33aad6a9eb54e.patch", "tags": ["patch"]}, {"url": "https://metacpan.org/release/HMBRAND/DBI-1.648/changes", "tags": ["release-notes"]}, {"url": "https://access.redhat.com/errata/RHSA-2026:38512"}, {"url": "https://access.redhat.com/errata/RHSA-2026:38513"}, {"url": "https://access.redhat.com/errata/RHSA-2026:38901"}, {"url": "https://access.redhat.com/errata/RHSA-2026:53371"}, {"url": "https://access.redhat.com/errata/RHSA-2026:62667"}, {"url": "https://access.redhat.com/security/cve/CVE-2026-9698"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486734"}, {"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9698.json"}], "descriptions": [{"lang": "en", "value": "DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.\n\nError messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.\n\nAttackers that can influence the error text in an application can trigger a buffer overflow."}, {"lang": "es", "value": "Las versiones de DBI anteriores a la 1.648 para Perl guardaban errores en un búfer de tamaño limitado.\n\nLos mensajes de error que se devolvían cuando RaiseError, PrintError o HandleError estaban configurados se escribían en un búfer de 200 bytes sin un límite de longitud.\n\nLos atacantes que pueden influir en el texto de error en una aplicación pueden desencadenar un desbordamiento de búfer."}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-120", "description": "CWE-120"}, {"lang": "en", "cweId": "CWE-787", "description": "CWE-787"}]}], "providerMetadata": {"orgId": "00000000-0000-4000-A000-000000000003", "shortName": "nvd", "dateUpdated": "2026-06-09T08:16:29Z", "x_subShortName": "nvd"}}}, "cveMetadata": {"cveId": "CVE-2026-9698", "state": "PUBLISHED", "dateUpdated": "2026-09-03T13:06:25Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-06-09T08:16:29Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.0"}