Description
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell (`cmd.exe`). When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute `cmd.exe` within the operating system. However, due to path search order issues, Perl initially looks for cmd.exe in the current working directory. This flaw allows an attacker with limited privileges to place`cmd.exe` in locations with weak permissions, such as `C:\ProgramData`. By doing so, arbitrary code can be executed when an administrator attempts to use this executable from these compromised locations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | perl | < 5.34.3, 5.36.0 – < 5.36.3, 5.38.0 – < 5.38.2 | 5.34.3 |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | perl | No fix yet | — |
| Ubuntu 20.04 LTS | perl6 | No fix yet | — |
| Ubuntu 18.04 LTS | perl6 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 18.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 16.04 LTS | perl | No fix yet | — |
| Ubuntu Pro 14.04 LTS | perl | No fix yet | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | perl | 5.38.2-1.1 | openSUSE-SU-2024:13479-1 |
Advisories 5
- WID-SEC-2023-3007 Perl: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Sep 16, 2026
- openSUSE-SU-2024:13479-1 perl-32bit-5.38.2-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- NCSC-2024-0433 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Nov 12, 2024
- ICSA-24-319-08 Siemens SINEC INS CISA ICS & IT advisories · Nov 12, 2024
- SSA-915275 SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3 Siemens ProductCERT · Nov 12, 2024