Skip to content
OpenAdvisories
Unscored USN-2916-1 3 CVEs

perl vulnerabilities

Published Mar 2, 2016 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Perl incorrectly handled certain regular expressions
with an invalid backreference. An attacker could use this issue to cause
Perl to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2013-7422)

Markus Vervier discovered that Perl incorrectly handled nesting in the
Data::Dumper module. An attacker could use this issue to cause Perl to
consume memory and crash, resulting in a denial of service. (CVE-2014-4330)

Stephane Chazelas discovered that Perl incorrectly handled duplicate
environment variables. An attacker could possibly use this issue to bypass
the taint protection mechanism. (CVE-2016-2381)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS perl 5.18.2-2ubuntu1.1

Vulnerabilities 3

  • Unscored —
    CVE-2013-7422

    Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows con…

    perl perl Debian Ubuntu
  • Unscored —
    CVE-2014-4330

    The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers …

    perl perl Debian Ubuntu
  • Unscored —
    CVE-2016-2381

    Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate …

    perl perl Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2013-7422
  • report
    https://ubuntu.com/security/CVE-2014-4330
  • report
    https://ubuntu.com/security/CVE-2016-2381