> CVE-2026-60081

« BACK_TO_HOME
PUBLISHED
2026-07-14 16:17
MODIFIED
2026-07-14 16:44
EPSS (Prob. Exploit)
0.63%
Top 50.4%
DATA SOURCES:
NVD 🔗 2026-07-14 RED HAT 🔗 2026-07-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-10-25 OSV 🔗 2026-07-20 MSRC 🔗 2026-11-02

> DESCRIPTION

DBI::ProfileData versions before 1.651 for Perl do not limit the path index. The path index column of profile dump files is used to allocate an array of data for the parser. An unbounded value allows an attacker to specify a large index and consume available memory.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-770

> CWE DETAILED DESCRIPTIONS

CWE-770: Allocation of Resources Without Limits or Throttling - The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

DBI::ProfileData versions before 1.651 for Perl do not limit the path index

AFFECTED PACKAGES:
Unknown / Unknown
54 versions affected
ALIASES:
GHSA-ww49-w4mv-jrr4

> HISTORIQUE DES MODIFICATIONS

Première apparition
14/07/2026 16:17
Source: NVD
📊 ENRICHISSEMENT 01/08/2026 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-770: Allocation of Resources Without Limits or Throttling - The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the ...
📊 ENRICHISSEMENT 19/07/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 19/07/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 3 Dernière mise à jour: 3 months ago

> REFERENCES

https://github.com/perl5-dbi/dbi/commit/6764e755e83ee1ebb1b40760e5b53eb50960bd7a...
https://github.com/perl5-dbi/dbi/security/advisories/GHSA-ww49-w4mv-jrr4
https://metacpan.org/release/HMBRAND/DBI-1.651/changes
« BACK_TO_HOME