Summary
[0.34-19.1]
- Use 3 arg open in grep() (CVE-2011-10007)
- Package tests
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | perl-File-Find-Rule | 0:0.34-19.1.el9_6 |
Vulnerabilities 1
-
High 8.8
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter t…