Skip to content
OpenAdvisories

Product · EGOR

Data::SortedSet::Shared

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.8

    Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW

    Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask…