USN-5030-2: Perl DBI module vulnerabilities

Related Vulnerabilities: CVE-2014-10402   CVE-2020-14393  

Several security issues were fixed in Perl DBI module.

It was discovered that the Perl DBI module incorrectly opened files outside of the folder specified in the data source name. A remote attacker could possibly use this issue to obtain sensitive information. (CVE-2014-10402)

Details

USN-5030-1 addressed vulnerabilities in Perl DBI module. This
update provides the corresponding updates for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that the Perl DBI module incorrectly opened files outside
of the folder specified in the data source name. A remote attacker could
possibly use this issue to obtain sensitive information. (CVE-2014-10402)

It was discovered that the Perl DBI module incorrectly handled certain long
strings. A local attacker could possibly use this issue to cause the DBI
module to crash, resulting in a denial of service. (CVE-2020-14393)