https://bugzilla.redhat.com/show_bug.cgi?id=2501259
Bug ID: 2501259
Summary: CVE-2026-14380 perl-DBI: DBI: Arbitrary code execution
via caller-influenced Profile attribute [fedora-all]
Product: Fedora
Version: rawhide
Status: NEW
Whiteboard: {"flaws": ["f08fa149-3dff-47e2-8c71-41cd2a4b9038"]}
Component: perl-DBI
Keywords: Security, SecurityTracking
Severity: high
Priority: high
Assignee: [email protected]
Reporter: [email protected]
QA Contact: [email protected]
CC: [email protected], [email protected],
[email protected],
[email protected], [email protected]
Blocks: 2497915
Target Milestone: ---
Classification: Fedora
Disclaimer: Community trackers are created by Red Hat Product Security team on
a best effort basis. Package maintainers are required to ascertain if the flaw
indeed affects their package, before starting the update process.
DBI versions before 1.650 for Perl are vulnerable to code injection via
caller-influenced Profile.
When a string is assigned to a DBI handle's Profile attribute, DBI splits it
into path, package and arguments, and interpolates the package part in a string
eval with no validation of the package name.
Any caller-influenced value that reaches the Profile attribute is therefore
arbitrary Perl code execution, including calls to run system commands.
The Profile attribute can be set from three different sources that can carry
untrusted data: the DBI_PROFILE environment variable, a direct attribute
assignment, and a DSN driver-attribute clause dbi:Driver(Profile=>SPEC):db.
An attacker controlling any of those inputs runs arbitrary Perl in the host
process. The strongest remote position is a network-exposed DBI::Gofer /
DBI::ProxyServer whose per-request DSN reaches the Profile attribute, letting a
client execute code on the broker host.
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2501259
Report this comment as SPAM:
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&format=report-spam&short_desc=Report%20of%20Bug%202501259%23c0
--
_______________________________________________
perl-devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new
