Vulnerability-Lookup

RHSA-2026:69112

Vulnerability from csaf_redhat - Published: 2026-09-21 06:15 - Updated: 2026-09-21 17:17

Summary

Red Hat Security Advisory: perl-DBI:1.641 security update

Severity

Important

Notes

Topic: An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations. Security Fix(es): * perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-73194

A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the `preparse` function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent placeholders expanding beyond their allocated buffer, leading to memory corruption. An attacker could exploit this to potentially achieve arbitrary code execution or cause a denial of service.

7.3 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Fixed 26 products

Product	Version	Remediation
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641	—	Vendor Fix fix Workaround

Threats

Impact Important

References

12 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:69112	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2516959	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-73194	self
https://bugzilla.redhat.com/show_bug.cgi?id=2516959	external
https://www.cve.org/CVERecord?id=CVE-2026-73194	external
https://nvd.nist.gov/vuln/detail/CVE-2026-73194	external
https://github.com/perl5-dbi/dbi/commit/29b72ae7d…	external
https://github.com/perl5-dbi/dbi/security/advisor…	external
https://www.cve.org/CVERecord?id=CVE-2026-10879	external
https://www.cve.org/CVERecord?id=CVE-2026-14739	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The perl-DBI package provides the standard database interface module for the Perl programming language. It implements a database-independent interface, meaning it defines a consistent set of methods, variables, and conventions for database operations.\n\nSecurity Fix(es):\n\n* perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder (CVE-2026-73194)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:69112",
        "url": "https://access.redhat.com/errata/RHSA-2026:69112"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2516959",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516959"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69112.json"
      }
    ],
    "title": "Red Hat Security Advisory: perl-DBI:1.641 security update",
    "tracking": {
      "current_release_date": "2026-09-21T17:17:54+00:00",
      "generator": {
        "date": "2026-09-21T17:17:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.0"
        }
      },
      "id": "RHSA-2026:69112",
      "initial_release_date": "2026-09-21T06:15:07+00:00",
      "revision_history": [
        {
          "date": "2026-09-21T06:15:07+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-09-21T06:15:07+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-09-21T17:17:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 8)",
                  "product_id": "AppStream-8.10.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:8::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=src\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=src\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=aarch64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=ppc64le\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=s390x\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2Bbc962974?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:69ef70f8"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debuginfo@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                "product": {
                  "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641)",
                  "product_id": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/perl-DBI-debugsource@1.641-10.module%2Bel8.10.0%2B24875%2B7c5253dc?arch=x86_64\u0026rpmmod=perl-DBI:1.641:8100020260914073706:e3b61263"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64 (perl-DBI:1.641) as a component of Red Hat Enterprise Linux AppStream (v. 8)",
          "product_id": "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
        },
        "product_reference": "perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
        "relates_to_product_reference": "AppStream-8.10.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-73194",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2026-08-15T12:30:55.502810+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2516959"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in DBI for Perl. An unvalidated numeric placeholder in the `preparse` function can lead to a heap out-of-bounds write. When processing an untrusted statement, a specially crafted numeric placeholder can cause the binder counter to become negative. This results in subsequent placeholders expanding beyond their allocated buffer, leading to memory corruption. An attacker could exploit this to potentially achieve arbitrary code execution or cause a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
          "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-73194"
        },
        {
          "category": "external",
          "summary": "RHBZ#2516959",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516959"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-73194",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-73194"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73194",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73194"
        },
        {
          "category": "external",
          "summary": "https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809.patch",
          "url": "https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809.patch"
        },
        {
          "category": "external",
          "summary": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4",
          "url": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10879",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10879"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-14739",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
        }
      ],
      "release_date": "2026-08-15T12:09:22.962000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-21T06:15:07+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:69112"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.src::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debuginfo-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+7c5253dc.x86_64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.aarch64::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.ppc64le::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.s390x::perl-DBI:1.641",
            "AppStream-8.10.0.Z.MAIN.EUS:perl-DBI-debugsource-0:1.641-10.module+el8.10.0+24875+bc962974.x86_64::perl-DBI:1.641"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "perl-DBI: DBI for Perl: Heap out-of-bounds write via unvalidated numeric placeholder"
    }
  ]
}

CVE-2026-73194 (GCVE-0-2026-73194)

Vulnerability from cvelistv5 – Published: 2026-08-15 12:09 – Updated: 2026-08-17 20:29

Title

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse

Summary

DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width of the longest ':p99999' expansion. The ':N' branch parses the number with `atoi(src)` and assigns it to the binder counter with no range check, so a statement containing ':2147483648' leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following '?' then expands through `sprintf(start, ":p%d", idx++)` to ':p-2147483648', 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes. Any caller that preparses an untrusted statement into ':pN' style placeholders gets a heap out-of-bounds write that grows with the number of '?' marks following the poisoned placeholder. The '?' and '%s' return styles compare the parsed number against the expected sequence and error out, and are unaffected.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-17 20:29 UTC

CWE

CWE-1284 - Improper Validation of Specified Quantity in Input
CWE-787 - Out-of-bounds Write

Assigner

CPANSec redhat root

References

4 references

URL	Tags
https://github.com/perl5-dbi/dbi/security/advisor…	vendor-advisory
https://github.com/perl5-dbi/dbi/commit/29b72ae7d…	patch
https://www.cve.org/CVERecord?id=CVE-2026-14739	related
https://www.cve.org/CVERecord?id=CVE-2026-10879	related

Impacted products

1 product

Vendor	Product	Version
		Affected: 0 , < 1.652 (custom)

Credits

Harsh Raj Singhania

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-73194",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-17T20:29:15.870047Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-17T20:29:56.764Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://cpan.org/modules",
          "defaultStatus": "unaffected",
          "modules": [
            "DBI"
          ],
          "packageName": "DBI",
          "packageURL": "pkg:cpan/DBI",
          "programFiles": [
            "DBI.xs"
          ],
          "programRoutines": [
            {
              "name": "preparse"
            }
          ],
          "repo": "https://github.com/perl5-dbi/dbi",
          "versions": [
            {
              "lessThan": "1.652",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Harsh Raj Singhania"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse.\n\npreparse reserves seven output bytes per input byte, the width of the longest \u0027:p99999\u0027 expansion. The \u0027:N\u0027 branch parses the number with `atoi(src)` and assigns it to the binder counter with no range check, so a statement containing \u0027:2147483648\u0027 leaves the counter negative (-2147483648 with glibc, where atoi wraps). Each following \u0027?\u0027 then expands through `sprintf(start, \":p%d\", idx++)` to \u0027:p-2147483648\u0027, 14 bytes with the terminating NUL where the buffer budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter passes.\n\nAny caller that preparses an untrusted statement into \u0027:pN\u0027 style placeholders gets a heap out-of-bounds write that grows with the number of \u0027?\u0027 marks following the poisoned placeholder. The \u0027?\u0027 and \u0027%s\u0027 return styles compare the parsed number against the expected sequence and error out, and are unaffected."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-1284",
              "description": "CWE-1284 Improper Validation of Specified Quantity in Input",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-15T12:09:22.962Z",
        "orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
        "shortName": "CPANSec"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://github.com/perl5-dbi/dbi/security/advisories/GHSA-623j-hfpc-mrc4"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/perl5-dbi/dbi/commit/29b72ae7d2a8114a734a55840bf1c45b89207809.patch"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-14739"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10879"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to DBI 1.652 or later."
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse",
      "workarounds": [
        {
          "lang": "en",
          "value": "For deployments that cannot be upgraded, limit SQL statements to 99,999 placeholders."
        }
      ],
      "x_generator": {
        "engine": "cpansec-cna-tool 0.1"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e",
    "assignerShortName": "CPANSec",
    "cveId": "CVE-2026-73194",
    "datePublished": "2026-08-15T12:09:22.962Z",
    "dateReserved": "2026-08-11T11:58:19.137Z",
    "dateUpdated": "2026-08-17T20:29:56.764Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:69112

CVE-2026-73194 (GCVE-0-2026-73194)

Tags

Sightings

Nomenclature

Related by attack behaviour