This page tracks the Alpine Linux fix status. The vulnerability itself is described on the main CVE page. View CVE-2026-9698 →

ALPINE-CVE-2026-9698

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer. Error messages that were returned when RaiseError, PrintError or HandleErr...

Original description

The description as published by the source.

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer.

Error messages that were returned when RaiseError, PrintError or HandleError were set were written to a 200-byte buffer without a length limit.

Attackers that can influence the error text in an application can trigger a buffer overflow.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Alpine:v3.24 perl-dbi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.648-r0"}]}]