Skip to content
OpenAdvisories

Product · EGOR

Data::Buffer::Shared

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.2

    Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW

    Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW. The segment is created in buf_generic.h with open(path, O_RDWR|O_CREAT|O_EXCL, 0666). O_EXCL blocks a pre-seeded file on create, but t…