Vulnerability Report

CVE-2012-1151

Title: Perl Denial of Service (DoS)

DoS

Proof Of Concept

No public PoC currently indexed for CVE-2012-1151.

CWE Category CWE-134

Published Date Sep 09, 2012

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 5.0 CVSS v2.0

Exploit Probability (EPSS)

2.74%

Vulnerability Summary

CVE-2012-1151: Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module before 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the pg_warn function or (2) a crafted DBD statement to the dbd_st_prepare function.

Impacted Vendors

perl 1

larry_wall 1

Reference Links

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536 http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes http://rhn.redhat.com/errata/RHSA-2012-1116.html http://secunia.com/advisories/48307 http://secunia.com/advisories/48319 http://secunia.com/advisories/48824 http://security.gentoo.org/glsa/glsa-201204-08.xml http://www.debian.org/security/2012/dsa-2431 http://www.mandriva.com/security/advisories?name=MDVSA-2012:112 http://www.openwall.com/lists/oss-security/2012/03/09/6 http://www.openwall.com/lists/oss-security/2012/03/10/4 https://bugzilla.redhat.com/show_bug.cgi?id=801733 https://exchange.xforce.ibmcloud.com/vulnerabilities/73854 https://exchange.xforce.ibmcloud.com/vulnerabilities/73855 https://rt.cpan.org/Public/Bug/Display.html?id=75642 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=661536 http://cpansearch.perl.org/src/TURNSTEP/DBD-Pg-2.19.1/Changes http://rhn.redhat.com/errata/RHSA-2012-1116.html http://secunia.com/advisories/48307 http://secunia.com/advisories/48319 http://secunia.com/advisories/48824 http://security.gentoo.org/glsa/glsa-201204-08.xml http://www.debian.org/security/2012/dsa-2431 http://www.mandriva.com/security/advisories?name=MDVSA-2012:112 http://www.openwall.com/lists/oss-security/2012/03/09/6 http://www.openwall.com/lists/oss-security/2012/03/10/4 https://bugzilla.redhat.com/show_bug.cgi?id=801733 https://exchange.xforce.ibmcloud.com/vulnerabilities/73854 https://exchange.xforce.ibmcloud.com/vulnerabilities/73855 https://rt.cpan.org/Public/Bug/Display.html?id=75642

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

5.0

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:N/I:N/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2012-1151 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

September 09, 2012 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected Stack

No specific products linked.