Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

rocky perl-dbi can corrupt memory, causing crashes

published 1 month ago

Summary

The perl-DBI module used on Rocky Linux can write data outside its intended memory area when it receives a numeric placeholder that isn’t checked. This could cause the program to crash or be taken over by an attacker. Install the latest perl-dbi package from the Rocky repositories as soon as possible.

What to do

Update rocky perl-dbi to version 0:1.643-26.el10_2.6.

Affected software

Ecosystem	Vendor	Product	Affected versions
Rocky Linux:10	rocky	perl-dbi	< 0:1.643-26.el10_2.6 Fix: upgrade to 0:1.643-26.el10_2.6

Original advisory text

Important: perl-DBI security update

The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.

Security Fix(es):

* perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

https://errata.rockylinux.org/RLSA-2026:70753 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2516959 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:70753 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.3 High

Timeline

Published23 Sep 2026

Updated30 Sep 2026

First seen30 Sep 2026

Sources

RLSA-2026:70753 · OSV

Track software like this

Free during beta