DBI before 1.656 can hang after failed DBD::DBM open (CVE-2026-111879)
A failed open_data leaves the table lock held, so a later open hangs.
2 stories, newest first · one card per story
A failed open_data leaves the table lock held, so a later open hangs.
Perl DBI before 1.653 loads arbitrary modules via unvalidated DBD::DBM dbm_type and dbm_mldbm attributes, enabling code execution with attacker-controlled attributes.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views