Skip to content
OpenAdvisories
Medium ALAS2-2026-3388 1 CVE

Moderate: perl-Storable security update (Amazon Linux 2)

Published Jun 22, 2026 · Updated Jun 22, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2 perl-Storable 0:2.45-3.amzn2.0.3
Amazon Linux · 2 perl-Storable-debuginfo 0:2.45-3.amzn2.0.3

Vulnerabilities 1

  • Critical 10.0
    CVE-2017-20230

    Storable versions before 3.05 for Perl has a stack overflow

    Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger …

    NWCLARK Storable perl perl Debian Ubuntu

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2017-20230.html