Unscored USN-3684-1 1 CVE

perl vulnerability

Published Jun 13, 2018 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Perl incorrectly handled certain archive files.
An attacker could possibly use this to overwrite arbitrary files.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 14.04 LTS 14.04:LTS	perl	5.18.2-2ubuntu1.6
Ubuntu · 16.04 LTS 16.04:LTS	perl	5.22.1-9ubuntu0.5
Ubuntu · 18.04 LTS 18.04:LTS	perl	5.26.1-6ubuntu0.1

Vulnerabilities 1

Unscored —

CVE-2018-12015

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mech…

perl perl perl Debian Ubuntu Alpine

Jun 7, 2018

References

report
https://ubuntu.com/security/CVE-2018-12015