SZB-010ac189d3
EUVD-2026-106230: DBI Perl module can crash via type confusion in dbi_profile
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- DBI
- Product
- DBI for Perl
- First seen
Summary
The EU vulnerability database (EUVD) lists EUVD-2026-106230 with a CVSS v3.1 score of 2.9 for DBI versions before 1.656. The entry says a type confusion in dbi_profile can crash Perl when a database handle is destroyed under a Profile Path with an {attr} element.
If you use DBI
Upgrade DBI to version 1.656 or later
Check applications using DBD::DBM for hung processes
What the sources say 2
· Mastodon: “DBI versions before 1.656 for Perl hang on a later open of a DBD::DBM table because a failed open_data does not release the table's lock.” Source
· Mastodon: “DBI versions before 1.656 for Perl crash via type confusion in dbi_profile when a database handle is destroyed under a Profile Path with an {attr} element.” Source