Skip to content
OpenAdvisories

Package · Debian

perl

85 known vulnerabilities.

85 results · Feed

  • Unscored —

    An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow,…

  • Unscored —

    Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 a…

  • Unscored —

    Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-…

  • Unscored —

    Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to…

  • Unscored —

    (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scri…

  • Unscored —

    The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which mi…

  • Unscored —

    The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dep…

  • Unscored —

    Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate …

  • Unscored —

    The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve t…

  • Unscored —

    Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows con…

  • Unscored —

    The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent attackers …

  • Unscored —
    CVE-2010-4777 Public exploit

    The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debuggi…

  • Unscored —

    The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memo…

  • Unscored —
    CVE-2012-6329 Public exploit EPSS 64%

    The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly han…

  • Unscored —

    The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a den…

  • Unscored —

    Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3,…

  • Unscored —

    CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might …

  • Unscored —
    CVE-2011-3597 Public exploit EPSS 13%

    Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute ar…

  • Unscored —

    Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl befo…

  • Unscored —
    CVE-2011-0761 Public exploit

    Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application c…

  • Unscored —
    CVE-2011-1487 Public exploit EPSS 11%

    The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.…

  • Unscored —

    Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and condu…

  • Unscored —

    CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 an…

  • Unscored —

    The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcod…

  • Unscored —

    The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reva…

  • Unscored —

    The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.…

  • Unscored —

    Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a UTF-8 character w…

  • Unscored —
    CVE-2009-1391 Public exploit

    Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS,…

  • Unscored —

    Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows lo…

  • Unscored —

    Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to dele…

  • Unscored —
    CVE-2008-2827 Public exploit

    The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, whi…

  • Unscored —

    Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corrupt…

  • Unscored —

    Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows conte…

  • Unscored —

    Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted remote attacker…

  • Unscored —

    Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to…

  • Unscored —

    Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes it easier …

  • Unscored —

    Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setu…

  • Unscored —
    CVE-2005-0155 Public exploit

    The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbit…

  • Unscored —
    CVE-2005-0156 Public exploit

    Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local us…

  • Unscored —

    Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for …