USN-5030-2

Dashboard / Vulnerabilities / USN-5030-2

USN-5030-2

Summary: libdbi-perl vulnerabilities

Details: USN-5030-1 addressed vulnerabilities in Perl DBI module. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Perl DBI module incorrectly opened files outside of the folder specified in the data source name. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2014-10402) It was discovered that the Perl DBI module incorrectly handled certain long strings. A local attacker could possibly use this issue to cause the DBI module to crash, resulting in a denial of service. (CVE-2020-14393)

References: https://ubuntu.com/security/notices/USN-5030-2, https://ubuntu.com/security/CVE-2014-10402, https://ubuntu.com/security/CVE-2020-14393