Detections
Analytics

Echo: libdbi-perl: security update to 1.647-1+deb13u1+e3

critical Tenable Cloud Security Plugin ID 461474

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder
 that sets the binder counter in preparse. preparse reserves seven output bytes per input byte, the width
 of the longest ':p99999' expansion. The ':N' branch parses the number with `atoi(src)` and assigns it to
 the binder counter with no range check, so a statement containing ':2147483648' leaves the counter
 negative (-2147483648 with glibc, where atoi wraps). Each following '?' then expands through
 `sprintf(start, ":p%d", idx++)` to ':p-2147483648', 14 bytes with the terminating NUL where the buffer
 budgets 7. The placeholder limit added in 1.650 tests the counter against 99,999, which a negative counter
 passes. Any caller that preparses an untrusted statement into ':pN' style placeholders gets a heap out-of-
 bounds write that grows with the number of '?' marks following the poisoned placeholder. The '?' and '%s'
 return styles compare the parsed number against the expected sequence and error out, and are unaffected.
 (CVE-2026-73194)

Solution

Update the libdbi-perl library and its related packages to version 1.647-1+deb13u1+e3 or later.

See Also

https://advisory.echohq.com/cve/CVE-2026-73194

Plugin Details

Severity: Critical

ID: 461474

Version: Revision 1.1

Type: Local

Published: 10/2/2026

Updated: 10/2/2026

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.44

CVSS v2

Risk Factor: High

Base Score: 9.4

Temporal Score: 7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:C

CVSS Score Source: CVE-2026-73194

CVSS v3

Risk Factor: Critical

Base Score: 9.1

Temporal Score: 7.9

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 8/16/2026

Vulnerability Publication Date: 8/15/2026

Reference Information

CVE: CVE-2026-73194