CVE-2012-1151

Name of the Vulnerable Software and Affected Versions DBD::Pg versions prior to 2.19.0

Description The issue concerns multiple format string vulnerabilities in the DBD::Pg module for Perl. These vulnerabilities can be exploited by remote PostgreSQL database servers, allowing them to cause a denial of service (process crash) through the use of format string specifiers. This can be achieved in two ways: by crafting a database warning to the pg warn function or by crafting a DBD statement to the dbd st prepare function.

Recommendations For versions prior to 2.19.0, update to version 2.19.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the pg warn function and the dbd st prepare function to minimize the risk of exploitation.