Description
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | perl | 5.8.0-14 | — |
| Debian 13 | perl | 5.8.0-14 | — |
| Debian 12 | perl | 5.8.0-14 | — |
| Debian 3.0 | perl | 5.6.1-8.2 | DSA-208 |
Advisories 1
- DSA-208 perl - broken safe compartment Debian Security (DSA / DLA) · Mar 9, 2026
References
- RHSA-2003:256 vendor-advisory
- 20021220 GLSA: perl mailing-list
- http://use.perl.org/articles/02/10/06/1118222.shtml?tid=5
- RHSA-2003:257 vendor-advisory
- 20021219 TSLSA-2002-0087 - perl mailing-list
- 20021216 [OpenPKG-SA-2002.014] OpenPKG Security Advisory (perl) mailing-list
- safe-pm-bypass-restrictions(10574) vdb-entry
- 3814 vdb-entry
- oval:org.mitre.oval:def:1160 vdb-entry signature
- 2183 vdb-entry
- DSA-208 vendor-advisory
- 6111 vdb-entry
- 20021105 Perl Safe.pm compartment reuse vuln mailing-list
- http://bugs6.perl.org/rt2/Ticket/Display.html?id=17744