CVE-2012-1151: perl
CVSS: 5.0v2.0MediumModified
AliasesRHSA-2012:1116DEBIAN-CVE-2012-1151DSA-2431-1
Published 09-09-2012Last modified 06-08-2024
Vulnerability summary
CVE-2012-1151 is a medium (CVSS 5.0) vulnerability in perl. EPSS estimates a 2.74% chance of exploitation in the next 30 days, higher than 86% of scored vulnerabilities.
CVSS score
5.0/10
010
Medium · v2.0 (NVD)EPSS score
2.74%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 09-09-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.
CVSS metrics
1 score · 1 source · 1 versionMedium 5.0Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:PSourcesSingle source
EPSS trend
Probability
2.74%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.74% on 21-09-2026
21-09-202621-10-2026
EPSS score2.74%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat2 products
- perl-DBD-Pg< 0:1.49-4.el5_8 | < 0:2.15.1-4.el6_3
- perl-DBD-Pg-debuginfo< 0:1.49-4.el5_8 | < 0:2.15.1-4.el6_3
Debian1 product
- libdbd-pg-perl< 2.17.1-2+squeeze1 | < 2.19.0-1
Perl1 product
- perl≤ 2.18.1 | 0.1 | 0.2 | 0.3 | 0.4 | 0.5 | 0.52 | 0.61 | 0.62 | 0.63 | 0.64 | 0.65 | 0.66 | 0.67 | 0.68 | 0.69 | 0.70 | 0.71 | 0.72 | 0.73 | 0.80 | 0.81 | 0.82 | 0.83 | 0.84 | 0.85 | 0.86 | 0.87 | 0.88 | 0.89 | 0.90 | 0.91 | 0.92 | 0.93 | 0.94 | 0.95 | 0.96 | 0.97 | 0.98 | 0.99 | 1.00 | 1.01 | 1.20 | 1.21 | 1.22 | 1.31 | 1.32 | 1.40 | 1.41 | 1.42 | 1.43 | 1.44 | 1.45 | 1.46 | 1.47 | 1.48 | 1.49 | 2.0.0 | 2.1.0 | 2.1.1 | 2.1.2 | 2.1.3 | 2.2.0 | 2.2.1 | 2.2.2 | 2.3.0 | 2.4.0 | 2.5.0 | 2.5.1 | 2.6.0 | 2.6.1 | 2.6.2 | 2.6.3 | 2.6.4 | 2.6.5 | 2.6.6 | 2.7.0 | 2.7.1 | 2.7.2 | 2.8.0 | 2.8.1 | 2.8.2 | 2.8.3 | 2.8.4 | 2.8.5 | 2.8.6 | 2.8.7 | 2.8.8 | 2.9.0 | 2.9.1 | 2.9.2 | 2.10.0 | 2.10.1 | 2.10.2 | 2.10.3 | 2.10.4 | 2.10.5 | 2.10.6 | 2.10.7 | 2.11.0 | 2.11.1 | 2.11.2 | 2.11.3 | 2.11.4 | 2.11.5 | 2.11.6 | 2.11.7 | 2.11.8 | 2.12.0 | 2.13.0 | 2.14.0 | 2.14.1 | 2.15.0 | 2.15.1 | 2.16.0 | 2.16.1 | 2.17.0 | 2.17.1 | 2.17.2 | 2.18.0
3 vendors · 4 products
References
22 links- bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536X Refsource MISC
- cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/ChangesX Refsource CONFIRM
Show all 22 references
- rt.cpan.org/Public/Bug/Display.html?id=75642X Refsource CONFIRM