Description
The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | perl | 5.10.1-13 | — |
| Debian 13 | perl | 5.10.1-13 | — |
| Debian 12 | perl | 5.10.1-13 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | perl +1 | 4:5.8.8-32.el5_5.1 | RHSA-2010:0458 |
| RHEL 4 | perl +1 | 3:5.8.5-53.el4 | RHSA-2010:0457 |
| RHEL 3 | perl +1 | 2:5.8.0-101.EL3 | RHSA-2010:0457 |
| RHEL 3 | perl-CGI | 2:2.89-101.EL3 | RHSA-2010:0457 |
| RHEL 3 | perl-CPAN | 2:1.61-101.EL3 | RHSA-2010:0457 |
| RHEL 3 | perl-DB_File | 2:1.806-101.EL3 | RHSA-2010:0457 |
Advisories 2
- RHSA-2010:0457 Red Hat Security Advisory: perl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2010:0458 Red Hat Security Advisory: perl security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- MDVSA-2010:115 vendor-advisory
- 42402 third-party-advisory
- oval:org.mitre.oval:def:9807 vdb-entry signature
- http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes
- 1024062 vdb-entry
- RHSA-2010:0457 vendor-advisory
- oval:org.mitre.oval:def:7424 vdb-entry signature
- https://bugzilla.redhat.com/show_bug.cgi?id=576508
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html
- 40049 third-party-advisory
- ADV-2010-3075 vdb-entry
- 40052 third-party-advisory
- RHSA-2010:0458 vendor-advisory
- [oss-security] 20100520 CVE-2010-1974 reject request (dupe of CVE-2010-1168) and CVE-2010-1447 description modification request mailing-list
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
- http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in
- MDVSA-2010:116 vendor-advisory