Perl: Schwachstelle ermöglicht Codeausführung

Summary

Product

Vulnerabilities 1

• High 7.8
  CVE-2023-7101 Exploited Public exploit EPSS 19%

  Arbitrary Code Execution (ACE) Vulnerability

  Spreadsheet::ParseExcel version 0.65 is a Perl module used for parsing Excel files. Spreadsheet::ParseExcel is vulnerable to an arbitrary code execution (ACE) vulnerability due to passing unvalidated input from a file into a string-type “eval”. Specifically, …

  Douglas Wilson Spreadsheet::ParseExcel libspreadsheet-parseexcel-perl perl-spreadsheet-parseexcel Debian Ubuntu Alpine
  Dec 24, 2023

  KEV Jan 2, 2024

Revision history

1. 2025-08-06 #6

   Neue Updates von Gentoo aufgenommen

2. 2024-05-21 #5

   Neue Updates von Ubuntu aufgenommen

3. 2024-01-22 #4

   Neue Updates von Amazon aufgenommen

4. 2024-01-18 #3

   Neue Updates von SUSE aufgenommen

5. 2024-01-01 #2

   Neue Updates von Fedora und Debian aufgenommen

6. 2023-12-26 #1

   Initiale Fassung

References

• GitHub Advisory Database - Perl Module Spreadsheet::ParseExcel vom 2023-12-26
  https://github.com/advisories/GHSA-3c85-mx4x-435c
• Proof of Concept (PoC)
  https://github.com/haile01/perl_spreadsheet_excel_rce_poc
• Fedora Security Advisory FEDORA-EPEL-2023-C87FDBA1FC vom 2023-12-31
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-c87fdba1fc
• Fedora Security Advisory FEDORA-EPEL-2023-735FE09BCB vom 2023-12-31
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-735fe09bcb
• Fedora Security Advisory FEDORA-EPEL-2023-60E0CC89B7 vom 2023-12-31
  https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-60e0cc89b7
• Fedora Security Advisory FEDORA-2023-921F6975C2 vom 2023-12-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-921f6975c2
• Fedora Security Advisory FEDORA-2023-84D3CC47B1 vom 2023-12-30
  https://bodhi.fedoraproject.org/updates/FEDORA-2023-84d3cc47b1
• Debian Security Advisory DLA-3702 vom 2023-12-31
  https://lists.debian.org/debian-lts-announce/2023/12/msg00025.html
• Debian Security Advisory DSA-5592 vom 2023-12-30
  https://lists.debian.org/debian-security-announce/2023/msg00289.html
• SUSE Security Update SUSE-SU-2024:0158-1 vom 2024-01-18
  https://lists.suse.com/pipermail/sle-security-updates/2024-January/017687.html
• Amazon Linux Security Advisory ALAS-2024-1905 vom 2024-01-23
  https://alas.aws.amazon.com/ALAS-2024-1905.html
• Ubuntu Security Notice USN-6781-1 vom 2024-05-21
  https://ubuntu.com/security/notices/USN-6781-1
• Gentoo Linux Security Advisory GLSA-202508-05 vom 2025-08-06
  https://security.gentoo.org/glsa/202508-05