Description
Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | grype-db | 0.35.0-1.1 | openSUSE-SU-2025:15377-1 |
Advisories 1
- openSUSE-SU-2025:15377-1 grype-db-0.35.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- perl-win32stat-bo(15732) vdb-entry
- 20040405 [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function mailing-list
- http://public.activestate.com/cgi-bin/perlbrowse?patch=22552
- VU#722414 third-party-advisory
- http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities
- 20040405 iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function mailing-list