CVE-2012-1151
- State
- Published
- Severity
- Not scored
- Published
- Sep 9, 2012
- Updated
- Aug 6, 2024
- Reserved
- Feb 14, 2012
Description
Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20120309 Re: CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flawsmailing-list
- MDVSA-2012:112vendor-advisory
- dbdpg-pgwarn-format-string(73854)vdb-entry
- 48307third-party-advisory
- RHSA-2012:1116vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536
- http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes
- https://bugzilla.redhat.com/show_bug.cgi?id=801733
- [oss-security] 20120309 CVE Request -- libdbd-pg-perl / perl-DBD-Pg && libyaml-libyaml-perl / perl-YAML-LibYAML: Multiple format string flawsmailing-list
- 48319third-party-advisory
- dbdpg-dbdstprepare-format-string(73855)vdb-entry
- GLSA-201204-08vendor-advisory
- DSA-2431vendor-advisory
- 48824third-party-advisory
- https://rt.cpan.org/Public/Bug/Display.html?id=75642
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.