GCVE-1988-2026-0523

Vulnerability from gna-1988 – Published: 2026-11-02 09:47 – Updated: 2026-11-02 09:47
VLAI
Title
[Bugtraq] [SECURITY] [DSA 6473-1] libdbi-perl security update
Summary
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6473-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso August 27, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libdbi-perl CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043 CVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVE-2026-73193 CVE-2026-73194 Debian Bug : 1141667 1142072 1144470 1144471 1144851 Several vulnerabilities were discovered in libdbi-perl, a Perl framework that provides a common interface to access various backend databases in a uniform manner, which could result in denial of service, path traversal, bypass of file-backed filters or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 1.652-2~deb13u1. We recommend that you upgrade your libdbi-perl packages. For the detailed security status of libdbi-perl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libdbi-perl Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmqQA7BfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QONQ//cFlJ4JxgrRTu9OdbM63gSMoDCGRtBHaGmBhtdQagrZgrtv8VUWTgsZMP hpk2buvdBKuGRR90KXdEj0842VbE9L7a9Gc8bN5/HPXWmgpwmLUthqXId6qp3BGU FYYTv2V2WhMc/1kSfnSjNwsW6rEvNRR2EHuTMc8eDOyjUzKH0VgctNR8JH3f9WYU ZTlxuaFsIjkH10BgACEyOQNQs0yPL3K1jnz/Vtt5XckUzPgURFXIG55s/2sohd9z 8Nu6283ghyhiUX8Zf1dVggj39Zonpx6jWmUe892IDv7fby2t0hcX+hzVS3jy4Jf8 lsgEbFZXCynf/VTB+fsE8M16JyssKwUIOrl6LI2LWdHajViA9kjpZjfJIXFH/qQ6 s9AeRnsJ7DIMBFJqYO1NrHvOWtrZUqcYVlQFpPlvM8znvgI4Tt330WlzpvKRpyxo SoYUbM/fZs5sIKQhCnOy4LpSZ3Mx+hWj6TXI6QxSUu52xtp4hdFjjml5y90klYVv 4dXwBIU2jv2v7QtVUc4F28vf4qF2M6cjXtd5E656jUpqDR5qobMfBEkd+4biAxYp 9cSPW+c/ngzPc0bjpX92JWuJjhL3yS9FIjXpIoD++6evbXmBRGpsL7wwoB+1/8ga uSsdP71uftL13m0mkLIMEOcsZoSD5b3pQdpignZrH0+RvK5GCVA= =toy9 -----END PGP SIGNATURE-----
Severity
No CVSS data available.
Assigner
VULNARCHIVE GNA GNA-1988
GNA scorecard E 38/100 over 552 records in the last 180 days details
References
Impacted products
Vendor Product Version CPE status
unknown libdbi-perl security update Affected: unknown
guessed Create a notification for this product.
Credits
Salvatore Bonaccorso
Relationships
reference GCVE-1988-2026-0523 (this record)
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "libdbi-perl security update",
          "vendor": "unknown",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6473-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 27, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : libdbi-perl\nCVE ID         : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043\nCVE-2026-15392 CVE-2026-60081 CVE-2026-60082 CVE-2026-73193\nCVE-2026-73194\nDebian Bug     : 1141667 1142072 1144470 1144471 1144851\nSeveral vulnerabilities were discovered in libdbi-perl, a Perl framework\nthat provides a common interface to access various backend databases in\na uniform manner, which could result in denial of service, path\ntraversal, bypass of file-backed filters or the execution of arbitrary\ncode.\nFor the stable distribution (trixie), these problems have been fixed in\nversion 1.652-2~deb13u1.\nWe recommend that you upgrade your libdbi-perl packages.\nFor the detailed security status of libdbi-perl please refer to its\nsecurity tracker page at:\nhttps://security-tracker.debian.org/tracker/libdbi-perl\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nuSsdP71uftL13m0mkLIMEOcsZoSD5b3pQdpignZrH0+RvK5GCVA=\n=toy9\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T09:47:19Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/45THFCFAWX4EDN67UTPSO7EMHRQ7RSWF/"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/libdbi-perl"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1wzWVE-00000002a92-3UZw%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6473-1] libdbi-perl security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-14380",
              "type": "related"
            },
            {
              "destId": "CVE-2026-14739",
              "type": "related"
            },
            {
              "destId": "CVE-2026-14740",
              "type": "related"
            },
            {
              "destId": "CVE-2026-15043",
              "type": "related"
            },
            {
              "destId": "CVE-2026-15392",
              "type": "related"
            },
            {
              "destId": "CVE-2026-60081",
              "type": "related"
            },
            {
              "destId": "CVE-2026-60082",
              "type": "related"
            },
            {
              "destId": "CVE-2026-73193",
              "type": "related"
            },
            {
              "destId": "CVE-2026-73194",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0523",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829",
            "automated": true,
            "contentSha256": "8d3debe3a20d9b3487ca95858c8891302eafa2bae23ceff70ab2d55889e31829",
            "evidenceScore": 6,
            "messageId": "E1wzWVE-00000002a92-3UZw%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/45THFCFAWX4EDN67UTPSO7EMHRQ7RSWF/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T09:47:19Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0523"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T09:47:19Z",
    "dateUpdated": "2026-11-02T09:47:19Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0523"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

JSON

Loading timeline…




    Related by attack behaviour

    Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.