CVE-2019-20919

Name of the Vulnerable Software and Affected Versions DBI module versions prior to 1.643 for Perl

Description An issue was discovered in the DBI module for Perl, where the code checks for NULL as required by the hv fetch() documentation, but then calls SvOK(profile), causing a NULL pointer dereference. This can lead to a denial of service.

Recommendations For versions prior to 1.643, update to version 1.643 or later to resolve the issue. As a temporary workaround, consider disabling the SvOK(profile) function call until a patch is available. Restrict access to the hv fetch() function to minimize the risk of exploitation.