Vulnerability in perl-DBD-Pg:3.7
Summary
ALBA-2020:0347: perl-DBD-Pg:3.7 bug fix and enhancement update. Affects perl-DBD-Pg across 2 version ranges.
< 3.7.4-4.module_el8.6.0+2791+af9a2484
< 3.7.4-4.module_el8.6.0+2855+f32c4cbc
Fixed in 3.7.4-4.module_el8.6.0+2791+af9a2484 or 3.7.4-4.module_el8.6.0+2855+f32c4cbc, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
perl-DBD-Pg is a Perl module that provides a database driver for PostgreSQL. It allows Perl programs to interact with PostgreSQL databases and execute SQL queries. This vulnerability affects versions 0 to 3.7.4-4.module_el8.6.0+2791+af9a2484 and 0 to 3.7.4-4.module_el8.6.0+2855+f32c4cbc on AlmaLinux 8.
Vulnerability Detail
The vulnerability in perl-DBD-Pg allows an attacker to execute arbitrary SQL queries or potentially gain unauthorized access to the database. This can lead to data leakage, data manipulation, or even complete compromise of the affected system. The issue originates from a bug in the module's code, which has been fixed in versions 3.7.4-4.module_el8.6.0+2791+af9a2484 and 3.7.4-4.module_el8.6.0+2855+f32c4cbc.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
sudo dnf update perl-DBD-Pg-
< 3.7.4-4.module_el8.6.0+2791+af9a24843.7.4-4.module_el8.6.0+2791+af9a2484 -
< 3.7.4-4.module_el8.6.0+2855+f32c4cbc3.7.4-4.module_el8.6.0+2855+f32c4cbc
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update to the fixed versions as soon as possible.
Conclusion
The vulnerability in perl-DBD-Pg can lead to serious security risks, including unauthorized access to databases and data manipulation. It is crucial to update to the fixed versions as soon as possible to mitigate these risks. For further support on vulnerability remediation, contact DevNack.com.
See every vulnerability recorded for perl-DBD-Pg →
FAQ
perl-DBD-Pg is a Perl module that provides a database driver for PostgreSQL. It allows Perl programs to interact with PostgreSQL databases and execute SQL queries.
This vulnerability allows an attacker to execute arbitrary SQL queries or potentially gain unauthorized access to the database, leading to data leakage, data manipulation, or complete compromise of the affected system.
Versions 0 to 3.7.4-4.module_el8.6.0+2791+af9a2484 and 0 to 3.7.4-4.module_el8.6.0+2855+f32c4cbc on AlmaLinux 8 are affected.
Yes, the vulnerability has been fixed in versions 3.7.4-4.module_el8.6.0+2791+af9a2484 and 3.7.4-4.module_el8.6.0+2855+f32c4cbc.
To fix this vulnerability, update perl-DBD-Pg to version 3.7.4-4.module_el8.6.0+2791+af9a2484 or 3.7.4-4.module_el8.6.0+2855+f32c4cbc using the package manager.
References
Related vulnerabilities
Recent vulnerabilities recorded for perl-DBD-Pg.
