Skip to content
OpenAdvisories

Package · Debian

perl

85 known vulnerabilities.

11 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-12087 Public exploit

    Socket versions before 2.041 for Perl have an out-of-bounds heap read

    Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argum…

  • High 7.3
    CVE-2026-48962 Public exploit

    IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob

    IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob. _parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() …

  • Unscored —
    CVE-2010-4777 Public exploit

    The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debuggi…

  • Unscored —
    CVE-2012-6329 Public exploit EPSS 64%

    The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly han…

  • Unscored —
    CVE-2011-3597 Public exploit EPSS 13%

    Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute ar…

  • Unscored —
    CVE-2011-0761 Public exploit

    Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application c…

  • Unscored —
    CVE-2011-1487 Public exploit EPSS 11%

    The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.…

  • Unscored —
    CVE-2009-1391 Public exploit

    Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS,…

  • Unscored —
    CVE-2008-2827 Public exploit

    The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whi…

  • Unscored —
    CVE-2005-0155 Public exploit

    The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbit…

  • Unscored —
    CVE-2005-0156 Public exploit

    Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local us…