Skip to content
OpenAdvisories

Product · EGOR

Data::DisjointSet::Shared

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.0

    Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

    Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in dsu.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022…