CVE-2019-20919: An issue was discovered in the DBI module before 1.643 for Perl.

Security readout for executives and security teams

CVE-2019-20919 is a crash risk in the Perl DBI module before 1.643. A NULL pointer dereference can occur after a failed profile lookup. The source bundle does not show data theft, privilege escalation, or active exploitation, but affected Perl services could become unavailable if the vulnerable path is reachable. Exposure is most likely in Perl applications or system packages using DBI versions before 1.643, including distro libdbi-perl packages before their advisory updates. The bundle does not identify specific application-level attack paths. Handle through normal patch management unless affected Perl DBI services are business-critical or externally exposed. The evidence supports availability risk, not confirmed compromise or active exploitation. Mitigation focus: Upgrade Perl DBI to version 1.643 or later where feasible.; Apply vendor libdbi-perl security updates from the relevant Linux distribution.; Check vendor advisories before applying non-standard workarounds..

Prepared

Jun 3, 2026, 10:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.