cve/2019/CVE-2019-20919.md
2024-06-18 02:51:15 +02:00

726 B

CVE-2019-20919

Description

An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation requires checking for NULL and the code does that. But, shortly thereafter, it calls SvOK(profile), causing a NULL pointer dereference.

POC

Reference

  • https://metacpan.org/pod/distribution/DBI/Changes#Changes-in-DBI-1.643-...

Github

No PoCs found on GitHub currently.