
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2013-7491 affects the DBI module before version 1.628 for Perl. The vulnerability was discovered and disclosed in 2013, with a fix released on July 22nd, 2013. The issue involves stack corruption that occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated (NVD).
The vulnerability is classified as an Out-of-bounds Write (CWE-787) issue. It has been assigned a CVSS v3.1 Base Score of 5.3 MEDIUM (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). The technical issue stems from stack corruption occurring during memory reallocation when handling user-defined functions that require significant memory resources (NVD).
The vulnerability can lead to stack corruption when specific conditions are met involving user-defined functions with substantial memory requirements. This could potentially affect the availability of services using the affected DBI module (NVD).
The vulnerability requires network access and has low attack complexity. No authentication or user interaction is required to exploit the issue, making it relatively straightforward to target systems running vulnerable versions of the DBI module (NVD).
The vulnerability was fixed in DBI module version 1.628, released on July 22nd, 2013. Users should upgrade to this version or later to address the stack corruption issue. The fix specifically addresses the callback-related stack corruption problem as documented in RT#85562 and RT#84974 (GitHub Perl5 DBI).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."