CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
7.8 HighFix available
CPAN 2.28 allows Signature Verification Bypass.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
0.86%Up 0.2 points since Dec 13, 2021
What each source reports
NVD Score used
CPAN 2.28 allows Signature Verification Bypass.
- Record
CVE-2020-16156- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-347
- Updated
- 2026-11-02
CVE List No score
CPAN 2.28 allows Signature Verification Bypass.
- Record
CVE-2020-16156- Updated
- 2026-11-02
EUVDEUVD-2020-8122 No score
CPAN 2.28 allows Signature Verification Bypass.
- Record
EUVD-2020-8122- Updated
- 2026-11-02
GitHub AdvisoriesGHSA-mx9v-6qg3-92rp
CPAN 2.28 allows Signature Verification Bypass.
CPAN 2.28 allows Signature Verification Bypass.
- Record
GHSA-mx9v-6qg3-92rp- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
OSVBELL-CVE-2020-16156
CVE-2020-16156 does not affect BellSoft software
- Record
BELL-CVE-2020-16156- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
CPAN 2.28 allows Signature Verification Bypass.
- Record
CVE-2020-16156- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 16 moreShow less
OSVDEBIAN-CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
- Record
DEBIAN-CVE-2020-16156- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2025:8432
Red Hat Security Advisory: perl-CPAN security update
- Record
RHSA-2025:8432- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2025:8432
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites.
Security Fix(es):
- perl-CPAN: Bypass of verification of signatures in CHECKSUMS files (CVE-2020-16156)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:8432- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-16156
CPAN 2.28 allows Signature Verification Bypass.
- Record
UBUNTU-CVE-2020-16156- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2025:8432 No score
Moderate: perl-CPAN security update
The CPAN module is a tool to query, download and build perl modules from CPAN sites.
Security Fix(es):
- perl-CPAN: Bypass of verification of signatures in CHECKSUMS files (CVE-2020-16156)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:8432- Updated
- 2026-11-02
OSVCLSA-2022-1668032518 No score
perl: Fix of CVE-2020-16156
- CVE-2020-16156: recognize CANNOT_VERIFY signature verification type
- Record
CLSA-2022-1668032518- Updated
- 2026-11-02
OSVCLSA-2022-1668118081 No score
Fix CVE(s): CVE-2020-16156
- SECURITY UPDATE: Signature verification bypass
- debian/patches/fixes/CVE-2020-16156.patch: recognize CANNOT_VERIFY signature verification type, add two new failure modes based on 'cpan_path' and improve interaction with external 'gpg' executable.
- CVE-2020-16156
- Record
CLSA-2022-1668118081- Updated
- 2026-11-02
OSVCLSA-2022-1668120434 No score
perl: Fix of CVE-2020-16156
- CVE-2020-16156: recognize CANNOT_VERIFY signature verification type
- Record
CLSA-2022-1668120434- Updated
- 2026-11-02
OSVCLSA-2022-1668122645 No score
perl: Fix of CVE-2020-16156
- CVE-2020-16156: fix signature verification bypass
- Record
CLSA-2022-1668122645- Updated
- 2026-11-02
OSVCLSA-2022-1668467714 No score
perl: Fix of CVE-2020-16156
- CVE-2020-16156: fix signature verification bypass
- Record
CLSA-2022-1668467714- Updated
- 2026-11-02
OSVCLSA-2025-1750165585 No score
perl: Fix of CVE-2020-16156
- CVE-2020-16156: fix signature verification bypass
- Record
CLSA-2025-1750165585- Updated
- 2026-11-02
OSVCLSA-2025-1758821935 No score
perl-CPAN: Fix of 2 CVEs
- CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS
- CVE-2020-16156: fix Signature Verification Bypass
- Record
CLSA-2025-1758821935- Updated
- 2026-11-02
OSVCLSA-2025-1758822139 No score
perl-CPAN: Fix of CVE-2020-16156
- CVE-2020-16156: fix Signature Verification Bypass
- Record
CLSA-2025-1758822139- Updated
- 2026-11-02
OSVCLSA-2025-1758822697 No score
perl-CPAN: Fix of 2 CVEs
- CVE-2023-31484: verify TLS certificates when downloading distributions over HTTPS
- CVE-2020-16156: fix Signature Verification Bypass
- Record
CLSA-2025-1758822697- Updated
- 2026-11-02
OSVMGASA-2022-0018 No score
Updated perl-CPAN packages fix security vulnerability
CPAN 2.28 allows Signature Verification Bypass. (CVE-2020-16156)
- Record
MGASA-2022-0018- Updated
- 2026-11-02
OSVUSN-5689-1 No score
perl vulnerability
It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature verification.
- Record
USN-5689-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perl-CPANAlmaLinux:8 |
before 2.18-402.el8_10 | 2.18-402.el8_10 |
perlTuxCare:OracleLinux:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-Archive-ExtractTuxCare:OracleLinux:6 |
before 1:0.38-146.el6.tuxcare.els4 | 1:0.38-146.el6.tuxcare.els4 |
perl-Archive-TarTuxCare:OracleLinux:6 |
before 1.58-146.el6.tuxcare.els4 | 1.58-146.el6.tuxcare.els4 |
perl-CGITuxCare:OracleLinux:6 |
before 3.51-146.el6.tuxcare.els4 | 3.51-146.el6.tuxcare.els4 |
perl-CPANTuxCare:OracleLinux:6 |
before 1.9402-146.el6.tuxcare.els4 | 1.9402-146.el6.tuxcare.els4 |
perl-CPANPLUSTuxCare:OracleLinux:6 |
before 0.88-146.el6.tuxcare.els4 | 0.88-146.el6.tuxcare.els4 |
perl-Compress-Raw-Bzip2TuxCare:OracleLinux:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-Compress-Raw-ZlibTuxCare:OracleLinux:6 |
before 1:2.021-146.el6.tuxcare.els4 | 1:2.021-146.el6.tuxcare.els4 |
perl-Compress-ZlibTuxCare:OracleLinux:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
Show 184 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-Digest-SHATuxCare:OracleLinux:6 |
before 1:5.47-146.el6.tuxcare.els4 | 1:5.47-146.el6.tuxcare.els4 |
perl-ExtUtils-CBuilderTuxCare:OracleLinux:6 |
before 1:0.27-146.el6.tuxcare.els4 | 1:0.27-146.el6.tuxcare.els4 |
perl-ExtUtils-EmbedTuxCare:OracleLinux:6 |
before 1.28-146.el6.tuxcare.els4 | 1.28-146.el6.tuxcare.els4 |
perl-ExtUtils-MakeMakerTuxCare:OracleLinux:6 |
before 6.55-146.el6.tuxcare.els4 | 6.55-146.el6.tuxcare.els4 |
perl-ExtUtils-ParseXSTuxCare:OracleLinux:6 |
before 1:2.2003.0-146.el6.tuxcare.els4 | 1:2.2003.0-146.el6.tuxcare.els4 |
perl-File-FetchTuxCare:OracleLinux:6 |
before 0.26-146.el6.tuxcare.els4 | 0.26-146.el6.tuxcare.els4 |
perl-IO-Compress-BaseTuxCare:OracleLinux:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-Compress-Bzip2TuxCare:OracleLinux:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-Compress-ZlibTuxCare:OracleLinux:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-ZlibTuxCare:OracleLinux:6 |
before 1:1.09-146.el6.tuxcare.els4 | 1:1.09-146.el6.tuxcare.els4 |
perl-IPC-CmdTuxCare:OracleLinux:6 |
before 1:0.56-146.el6.tuxcare.els4 | 1:0.56-146.el6.tuxcare.els4 |
perl-Locale-Maketext-SimpleTuxCare:OracleLinux:6 |
before 1:0.18-146.el6.tuxcare.els4 | 1:0.18-146.el6.tuxcare.els4 |
perl-Log-MessageTuxCare:OracleLinux:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Log-Message-SimpleTuxCare:OracleLinux:6 |
before 0.04-146.el6.tuxcare.els4 | 0.04-146.el6.tuxcare.els4 |
perl-Module-BuildTuxCare:OracleLinux:6 |
before 1:0.3500-146.el6.tuxcare.els4 | 1:0.3500-146.el6.tuxcare.els4 |
perl-Module-CoreListTuxCare:OracleLinux:6 |
before 2.18-146.el6.tuxcare.els4 | 2.18-146.el6.tuxcare.els4 |
perl-Module-LoadTuxCare:OracleLinux:6 |
before 1:0.16-146.el6.tuxcare.els4 | 1:0.16-146.el6.tuxcare.els4 |
perl-Module-Load-ConditionalTuxCare:OracleLinux:6 |
before 0.30-146.el6.tuxcare.els4 | 0.30-146.el6.tuxcare.els4 |
perl-Module-LoadedTuxCare:OracleLinux:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Module-PluggableTuxCare:OracleLinux:6 |
before 1:3.90-146.el6.tuxcare.els4 | 1:3.90-146.el6.tuxcare.els4 |
perl-Object-AccessorTuxCare:OracleLinux:6 |
before 1:0.34-146.el6.tuxcare.els4 | 1:0.34-146.el6.tuxcare.els4 |
perl-Package-ConstantsTuxCare:OracleLinux:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Params-CheckTuxCare:OracleLinux:6 |
before 1:0.26-146.el6.tuxcare.els4 | 1:0.26-146.el6.tuxcare.els4 |
perl-Parse-CPAN-MetaTuxCare:OracleLinux:6 |
before 1:1.40-146.el6.tuxcare.els4 | 1:1.40-146.el6.tuxcare.els4 |
perl-Pod-EscapesTuxCare:OracleLinux:6 |
before 1:1.04-146.el6.tuxcare.els4 | 1:1.04-146.el6.tuxcare.els4 |
perl-Pod-SimpleTuxCare:OracleLinux:6 |
before 1:3.13-146.el6.tuxcare.els4 | 1:3.13-146.el6.tuxcare.els4 |
perl-Term-UITuxCare:OracleLinux:6 |
before 0.20-146.el6.tuxcare.els4 | 0.20-146.el6.tuxcare.els4 |
perl-Test-HarnessTuxCare:OracleLinux:6 |
before 3.17-146.el6.tuxcare.els4 | 3.17-146.el6.tuxcare.els4 |
perl-Test-SimpleTuxCare:OracleLinux:6 |
before 0.92-146.el6.tuxcare.els4 | 0.92-146.el6.tuxcare.els4 |
perl-Time-HiResTuxCare:OracleLinux:6 |
before 4:1.9721-146.el6.tuxcare.els4 | 4:1.9721-146.el6.tuxcare.els4 |
perl-Time-PieceTuxCare:OracleLinux:6 |
before 1.15-146.el6.tuxcare.els4 | 1.15-146.el6.tuxcare.els4 |
perl-coreTuxCare:OracleLinux:6 |
before 5.10.1-146.el6.tuxcare.els4 | 5.10.1-146.el6.tuxcare.els4 |
perl-develTuxCare:OracleLinux:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-libsTuxCare:OracleLinux:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-parentTuxCare:OracleLinux:6 |
before 1:0.221-146.el6.tuxcare.els4 | 1:0.221-146.el6.tuxcare.els4 |
perl-suidperlTuxCare:OracleLinux:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-versionTuxCare:OracleLinux:6 |
before 3:0.77-146.el6.tuxcare.els4 | 3:0.77-146.el6.tuxcare.els4 |
libperl-devTuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
libperl5.22TuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perlTuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perl-baseTuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perl-debugTuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perl-docTuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perl-modules-5.22TuxCare:Ubuntu:16.04 |
before 5.22.1-9ubuntu0.9+tuxcare.els1 | 5.22.1-9ubuntu0.9+tuxcare.els1 |
perlTuxCare:CentOS:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-Archive-ExtractTuxCare:CentOS:6 |
before 1:0.38-146.el6.tuxcare.els4 | 1:0.38-146.el6.tuxcare.els4 |
perl-Archive-TarTuxCare:CentOS:6 |
before 1.58-146.el6.tuxcare.els4 | 1.58-146.el6.tuxcare.els4 |
perl-CGITuxCare:CentOS:6 |
before 3.51-146.el6.tuxcare.els4 | 3.51-146.el6.tuxcare.els4 |
perl-CPANTuxCare:CentOS:6 |
before 1.9402-146.el6.tuxcare.els4 | 1.9402-146.el6.tuxcare.els4 |
perl-CPANPLUSTuxCare:CentOS:6 |
before 0.88-146.el6.tuxcare.els4 | 0.88-146.el6.tuxcare.els4 |
perl-Compress-Raw-Bzip2TuxCare:CentOS:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-Compress-Raw-ZlibTuxCare:CentOS:6 |
before 1:2.021-146.el6.tuxcare.els4 | 1:2.021-146.el6.tuxcare.els4 |
perl-Compress-ZlibTuxCare:CentOS:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-Digest-SHATuxCare:CentOS:6 |
before 1:5.47-146.el6.tuxcare.els4 | 1:5.47-146.el6.tuxcare.els4 |
perl-ExtUtils-CBuilderTuxCare:CentOS:6 |
before 1:0.27-146.el6.tuxcare.els4 | 1:0.27-146.el6.tuxcare.els4 |
perl-ExtUtils-EmbedTuxCare:CentOS:6 |
before 1.28-146.el6.tuxcare.els4 | 1.28-146.el6.tuxcare.els4 |
perl-ExtUtils-MakeMakerTuxCare:CentOS:6 |
before 6.55-146.el6.tuxcare.els4 | 6.55-146.el6.tuxcare.els4 |
perl-ExtUtils-ParseXSTuxCare:CentOS:6 |
before 1:2.2003.0-146.el6.tuxcare.els4 | 1:2.2003.0-146.el6.tuxcare.els4 |
perl-File-FetchTuxCare:CentOS:6 |
before 0.26-146.el6.tuxcare.els4 | 0.26-146.el6.tuxcare.els4 |
perl-IO-Compress-BaseTuxCare:CentOS:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-Compress-Bzip2TuxCare:CentOS:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-Compress-ZlibTuxCare:CentOS:6 |
before 2.021-146.el6.tuxcare.els4 | 2.021-146.el6.tuxcare.els4 |
perl-IO-ZlibTuxCare:CentOS:6 |
before 1:1.09-146.el6.tuxcare.els4 | 1:1.09-146.el6.tuxcare.els4 |
perl-IPC-CmdTuxCare:CentOS:6 |
before 1:0.56-146.el6.tuxcare.els4 | 1:0.56-146.el6.tuxcare.els4 |
perl-Locale-Maketext-SimpleTuxCare:CentOS:6 |
before 1:0.18-146.el6.tuxcare.els4 | 1:0.18-146.el6.tuxcare.els4 |
perl-Log-MessageTuxCare:CentOS:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Log-Message-SimpleTuxCare:CentOS:6 |
before 0.04-146.el6.tuxcare.els4 | 0.04-146.el6.tuxcare.els4 |
perl-Module-BuildTuxCare:CentOS:6 |
before 1:0.3500-146.el6.tuxcare.els4 | 1:0.3500-146.el6.tuxcare.els4 |
perl-Module-CoreListTuxCare:CentOS:6 |
before 2.18-146.el6.tuxcare.els4 | 2.18-146.el6.tuxcare.els4 |
perl-Module-LoadTuxCare:CentOS:6 |
before 1:0.16-146.el6.tuxcare.els4 | 1:0.16-146.el6.tuxcare.els4 |
perl-Module-Load-ConditionalTuxCare:CentOS:6 |
before 0.30-146.el6.tuxcare.els4 | 0.30-146.el6.tuxcare.els4 |
perl-Module-LoadedTuxCare:CentOS:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Module-PluggableTuxCare:CentOS:6 |
before 1:3.90-146.el6.tuxcare.els4 | 1:3.90-146.el6.tuxcare.els4 |
perl-Object-AccessorTuxCare:CentOS:6 |
before 1:0.34-146.el6.tuxcare.els4 | 1:0.34-146.el6.tuxcare.els4 |
perl-Package-ConstantsTuxCare:CentOS:6 |
before 1:0.02-146.el6.tuxcare.els4 | 1:0.02-146.el6.tuxcare.els4 |
perl-Params-CheckTuxCare:CentOS:6 |
before 1:0.26-146.el6.tuxcare.els4 | 1:0.26-146.el6.tuxcare.els4 |
perl-Parse-CPAN-MetaTuxCare:CentOS:6 |
before 1:1.40-146.el6.tuxcare.els4 | 1:1.40-146.el6.tuxcare.els4 |
perl-Pod-EscapesTuxCare:CentOS:6 |
before 1:1.04-146.el6.tuxcare.els4 | 1:1.04-146.el6.tuxcare.els4 |
perl-Pod-SimpleTuxCare:CentOS:6 |
before 1:3.13-146.el6.tuxcare.els4 | 1:3.13-146.el6.tuxcare.els4 |
perl-Term-UITuxCare:CentOS:6 |
before 0.20-146.el6.tuxcare.els4 | 0.20-146.el6.tuxcare.els4 |
perl-Test-HarnessTuxCare:CentOS:6 |
before 3.17-146.el6.tuxcare.els4 | 3.17-146.el6.tuxcare.els4 |
perl-Test-SimpleTuxCare:CentOS:6 |
before 0.92-146.el6.tuxcare.els4 | 0.92-146.el6.tuxcare.els4 |
perl-Time-HiResTuxCare:CentOS:6 |
before 4:1.9721-146.el6.tuxcare.els4 | 4:1.9721-146.el6.tuxcare.els4 |
perl-Time-PieceTuxCare:CentOS:6 |
before 1.15-146.el6.tuxcare.els4 | 1.15-146.el6.tuxcare.els4 |
perl-coreTuxCare:CentOS:6 |
before 5.10.1-146.el6.tuxcare.els4 | 5.10.1-146.el6.tuxcare.els4 |
perl-develTuxCare:CentOS:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-libsTuxCare:CentOS:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-parentTuxCare:CentOS:6 |
before 1:0.221-146.el6.tuxcare.els4 | 1:0.221-146.el6.tuxcare.els4 |
perl-suidperlTuxCare:CentOS:6 |
before 4:5.10.1-146.el6.tuxcare.els4 | 4:5.10.1-146.el6.tuxcare.els4 |
perl-versionTuxCare:CentOS:6 |
before 3:0.77-146.el6.tuxcare.els4 | 3:0.77-146.el6.tuxcare.els4 |
perlTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-Attribute-HandlersTuxCare:CentOS:8.5 |
before 0.99-420.el8.tuxcare.els1 | 0.99-420.el8.tuxcare.els1 |
perl-Devel-PeekTuxCare:CentOS:8.5 |
before 1.26-420.el8.tuxcare.els1 | 1.26-420.el8.tuxcare.els1 |
perl-Devel-SelfStubberTuxCare:CentOS:8.5 |
before 1.06-420.el8.tuxcare.els1 | 1.06-420.el8.tuxcare.els1 |
perl-ErrnoTuxCare:CentOS:8.5 |
before 1.28-420.el8.tuxcare.els1 | 1.28-420.el8.tuxcare.els1 |
perl-ExtUtils-EmbedTuxCare:CentOS:8.5 |
before 1.34-420.el8.tuxcare.els1 | 1.34-420.el8.tuxcare.els1 |
perl-ExtUtils-MiniperlTuxCare:CentOS:8.5 |
before 1.06-420.el8.tuxcare.els1 | 1.06-420.el8.tuxcare.els1 |
perl-IOTuxCare:CentOS:8.5 |
before 1.38-420.el8.tuxcare.els1 | 1.38-420.el8.tuxcare.els1 |
perl-IO-ZlibTuxCare:CentOS:8.5 |
before 1:1.10-420.el8.tuxcare.els1 | 1:1.10-420.el8.tuxcare.els1 |
perl-Locale-Maketext-SimpleTuxCare:CentOS:8.5 |
before 1:0.21-420.el8.tuxcare.els1 | 1:0.21-420.el8.tuxcare.els1 |
perl-Math-ComplexTuxCare:CentOS:8.5 |
before 1.59-420.el8.tuxcare.els1 | 1.59-420.el8.tuxcare.els1 |
perl-MemoizeTuxCare:CentOS:8.5 |
before 1.03-420.el8.tuxcare.els1 | 1.03-420.el8.tuxcare.els1 |
perl-Module-LoadedTuxCare:CentOS:8.5 |
before 1:0.08-420.el8.tuxcare.els1 | 1:0.08-420.el8.tuxcare.els1 |
perl-Net-PingTuxCare:CentOS:8.5 |
before 2.55-420.el8.tuxcare.els1 | 2.55-420.el8.tuxcare.els1 |
perl-Pod-HtmlTuxCare:CentOS:8.5 |
before 1.22.02-420.el8.tuxcare.els1 | 1.22.02-420.el8.tuxcare.els1 |
perl-SelfLoaderTuxCare:CentOS:8.5 |
before 1.23-420.el8.tuxcare.els1 | 1.23-420.el8.tuxcare.els1 |
perl-TestTuxCare:CentOS:8.5 |
before 1.30-420.el8.tuxcare.els1 | 1.30-420.el8.tuxcare.els1 |
perl-Time-PieceTuxCare:CentOS:8.5 |
before 1.31-420.el8.tuxcare.els1 | 1.31-420.el8.tuxcare.els1 |
perl-develTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-interpreterTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-libnetcfgTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-libsTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-macrosTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-openTuxCare:CentOS:8.5 |
before 1.11-420.el8.tuxcare.els1 | 1.11-420.el8.tuxcare.els1 |
perl-testsTuxCare:CentOS:8.5 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-utilsTuxCare:CentOS:8.5 |
before 5.26.3-420.el8.tuxcare.els1 | 5.26.3-420.el8.tuxcare.els1 |
perlTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-Attribute-HandlersTuxCare:CentOS:8.4 |
before 0.99-420.el8.tuxcare.els1 | 0.99-420.el8.tuxcare.els1 |
perl-Devel-PeekTuxCare:CentOS:8.4 |
before 1.26-420.el8.tuxcare.els1 | 1.26-420.el8.tuxcare.els1 |
perl-Devel-SelfStubberTuxCare:CentOS:8.4 |
before 1.06-420.el8.tuxcare.els1 | 1.06-420.el8.tuxcare.els1 |
perl-ErrnoTuxCare:CentOS:8.4 |
before 1.28-420.el8.tuxcare.els1 | 1.28-420.el8.tuxcare.els1 |
perl-ExtUtils-EmbedTuxCare:CentOS:8.4 |
before 1.34-420.el8.tuxcare.els1 | 1.34-420.el8.tuxcare.els1 |
perl-ExtUtils-MiniperlTuxCare:CentOS:8.4 |
before 1.06-420.el8.tuxcare.els1 | 1.06-420.el8.tuxcare.els1 |
perl-IOTuxCare:CentOS:8.4 |
before 1.38-420.el8.tuxcare.els1 | 1.38-420.el8.tuxcare.els1 |
perl-IO-ZlibTuxCare:CentOS:8.4 |
before 1:1.10-420.el8.tuxcare.els1 | 1:1.10-420.el8.tuxcare.els1 |
perl-Locale-Maketext-SimpleTuxCare:CentOS:8.4 |
before 1:0.21-420.el8.tuxcare.els1 | 1:0.21-420.el8.tuxcare.els1 |
perl-Math-ComplexTuxCare:CentOS:8.4 |
before 1.59-420.el8.tuxcare.els1 | 1.59-420.el8.tuxcare.els1 |
perl-MemoizeTuxCare:CentOS:8.4 |
before 1.03-420.el8.tuxcare.els1 | 1.03-420.el8.tuxcare.els1 |
perl-Module-LoadedTuxCare:CentOS:8.4 |
before 1:0.08-420.el8.tuxcare.els1 | 1:0.08-420.el8.tuxcare.els1 |
perl-Net-PingTuxCare:CentOS:8.4 |
before 2.55-420.el8.tuxcare.els1 | 2.55-420.el8.tuxcare.els1 |
perl-Pod-HtmlTuxCare:CentOS:8.4 |
before 1.22.02-420.el8.tuxcare.els1 | 1.22.02-420.el8.tuxcare.els1 |
perl-SelfLoaderTuxCare:CentOS:8.4 |
before 1.23-420.el8.tuxcare.els1 | 1.23-420.el8.tuxcare.els1 |
perl-TestTuxCare:CentOS:8.4 |
before 1.30-420.el8.tuxcare.els1 | 1.30-420.el8.tuxcare.els1 |
perl-Time-PieceTuxCare:CentOS:8.4 |
before 1.31-420.el8.tuxcare.els1 | 1.31-420.el8.tuxcare.els1 |
perl-develTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-interpreterTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-libnetcfgTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-libsTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-macrosTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-openTuxCare:CentOS:8.4 |
before 1.11-420.el8.tuxcare.els1 | 1.11-420.el8.tuxcare.els1 |
perl-testsTuxCare:CentOS:8.4 |
before 4:5.26.3-420.el8.tuxcare.els1 | 4:5.26.3-420.el8.tuxcare.els1 |
perl-utilsTuxCare:CentOS:8.4 |
before 5.26.3-420.el8.tuxcare.els1 | 5.26.3-420.el8.tuxcare.els1 |
perlTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-Attribute-HandlersTuxCare:CentOS-Stream:8 |
before 0.99-422.el8.tuxcare.els1 | 0.99-422.el8.tuxcare.els1 |
perl-Devel-PeekTuxCare:CentOS-Stream:8 |
before 1.26-422.el8.tuxcare.els1 | 1.26-422.el8.tuxcare.els1 |
perl-Devel-SelfStubberTuxCare:CentOS-Stream:8 |
before 1.06-422.el8.tuxcare.els1 | 1.06-422.el8.tuxcare.els1 |
perl-ErrnoTuxCare:CentOS-Stream:8 |
before 1.28-422.el8.tuxcare.els1 | 1.28-422.el8.tuxcare.els1 |
perl-ExtUtils-EmbedTuxCare:CentOS-Stream:8 |
before 1.34-422.el8.tuxcare.els1 | 1.34-422.el8.tuxcare.els1 |
perl-ExtUtils-MiniperlTuxCare:CentOS-Stream:8 |
before 1.06-422.el8.tuxcare.els1 | 1.06-422.el8.tuxcare.els1 |
perl-IOTuxCare:CentOS-Stream:8 |
before 1.38-422.el8.tuxcare.els1 | 1.38-422.el8.tuxcare.els1 |
perl-IO-ZlibTuxCare:CentOS-Stream:8 |
before 1:1.10-422.el8.tuxcare.els1 | 1:1.10-422.el8.tuxcare.els1 |
perl-Locale-Maketext-SimpleTuxCare:CentOS-Stream:8 |
before 1:0.21-422.el8.tuxcare.els1 | 1:0.21-422.el8.tuxcare.els1 |
perl-Math-ComplexTuxCare:CentOS-Stream:8 |
before 1.59-422.el8.tuxcare.els1 | 1.59-422.el8.tuxcare.els1 |
perl-MemoizeTuxCare:CentOS-Stream:8 |
before 1.03-422.el8.tuxcare.els1 | 1.03-422.el8.tuxcare.els1 |
perl-Module-LoadedTuxCare:CentOS-Stream:8 |
before 1:0.08-422.el8.tuxcare.els1 | 1:0.08-422.el8.tuxcare.els1 |
perl-Net-PingTuxCare:CentOS-Stream:8 |
before 2.55-422.el8.tuxcare.els1 | 2.55-422.el8.tuxcare.els1 |
perl-Pod-HtmlTuxCare:CentOS-Stream:8 |
before 1.22.02-422.el8.tuxcare.els1 | 1.22.02-422.el8.tuxcare.els1 |
perl-SelfLoaderTuxCare:CentOS-Stream:8 |
before 1.23-422.el8.tuxcare.els1 | 1.23-422.el8.tuxcare.els1 |
perl-TestTuxCare:CentOS-Stream:8 |
before 1.30-422.el8.tuxcare.els1 | 1.30-422.el8.tuxcare.els1 |
perl-Time-PieceTuxCare:CentOS-Stream:8 |
before 1.31-422.el8.tuxcare.els1 | 1.31-422.el8.tuxcare.els1 |
perl-develTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-interpreterTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-libnetcfgTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-libsTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-macrosTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-openTuxCare:CentOS-Stream:8 |
before 1.11-422.el8.tuxcare.els1 | 1.11-422.el8.tuxcare.els1 |
perl-testsTuxCare:CentOS-Stream:8 |
before 4:5.26.3-422.el8.tuxcare.els1 | 4:5.26.3-422.el8.tuxcare.els1 |
perl-utilsTuxCare:CentOS-Stream:8 |
before 5.26.3-422.el8.tuxcare.els1 | 5.26.3-422.el8.tuxcare.els1 |
perl-CPANTuxCare:CentOS:8.4 From an advisory covering 2 CVEs |
before 2.18-397.el8.tuxcare.els1 | 2.18-397.el8.tuxcare.els1 |
perl-CPANTuxCare:CentOS-Stream:8 |
before 2.18-399.el8.tuxcare.els1 | 2.18-399.el8.tuxcare.els1 |
perl-CPAN-testsTuxCare:CentOS-Stream:8 |
before 2.18-399.el8.tuxcare.els1 | 2.18-399.el8.tuxcare.els1 |
perl-CPANTuxCare:CentOS:8.5 From an advisory covering 2 CVEs |
before 2.18-397.el8.tuxcare.els1 | 2.18-397.el8.tuxcare.els1 |
perlDebian:12 |
before 5.36.0-4 | 5.36.0-4 |
perlDebian:13 |
before 5.36.0-4 | 5.36.0-4 |
perlDebian:14 |
before 5.36.0-4 | 5.36.0-4 |
perlDebian:11 From an advisory covering 2 CVEs |
before 5.32.1-4+deb11u4, plus listed versions 5.32.1-45.32.1-4+deb11u15.32.1-4+deb11u25.32.1-4+deb11u3 |
5.32.1-4+deb11u4 |
perl-CPANMageia:8 |
before 2.290.0-1.mga8 | 2.290.0-1.mga8 |
perl-CPANRed Hat:enterprise_linux:8::appstream |
before 0:2.18-402.el8_10 | 0:2.18-402.el8_10 |
perl-CPANRocky Linux:8 |
before 0:2.18-402.el8_10 | 0:2.18-402.el8_10 |
perlUbuntu:Pro:14.04:LTS |
before 5.18.2-2ubuntu1.7+esm4, plus listed versions 5.14.2-21build15.18.1-45.18.1-4build15.18.1-55.18.2-2 Show 7 moreShow less5.18.2-2ubuntu15.18.2-2ubuntu1.15.18.2-2ubuntu1.35.18.2-2ubuntu1.45.18.2-2ubuntu1.65.18.2-2ubuntu1.75.18.2-2ubuntu1.7+esm3 |
5.18.2-2ubuntu1.7+esm4 |
perlUbuntu:Pro:16.04:LTS |
before 5.22.1-9ubuntu0.9+esm1, plus listed versions 5.20.2-65.22.1-35.22.1-45.22.1-55.22.1-7 Show 7 moreShow less5.22.1-85.22.1-95.22.1-9ubuntu0.25.22.1-9ubuntu0.35.22.1-9ubuntu0.55.22.1-9ubuntu0.65.22.1-9ubuntu0.9 |
5.22.1-9ubuntu0.9+esm1 |
perlUbuntu:18.04:LTS |
before 5.26.1-6ubuntu0.6, plus listed versions 5.26.0-8ubuntu15.26.1-2ubuntu15.26.1-35.26.1-45.26.1-4build1 Show 6 moreShow less5.26.1-55.26.1-65.26.1-6ubuntu0.15.26.1-6ubuntu0.25.26.1-6ubuntu0.35.26.1-6ubuntu0.5 |
5.26.1-6ubuntu0.6 |
perlUbuntu:20.04:LTS |
before 5.30.0-9ubuntu0.3, plus listed versions 5.28.1-6build15.30.0-75.30.0-95.30.0-9build15.30.0-9ubuntu0.2 |
5.30.0-9ubuntu0.3 |
perlUbuntu:22.04:LTS |
before 5.34.0-3ubuntu1.1, plus listed versions 5.32.1-3ubuntu35.34.0-3ubuntu1 |
5.34.0-3ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-16156 is a high vulnerability (CVSS 7.8) in Fedoraproject Fedora, published December 13, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.86%, the 58th percentile. Fixed in perl-CPAN 2.18-402.el8_10.
References
metacpan.org/pod/distribution/CPAN/scripts/cpan
blog.hackeriet.no/cpan-signature-verification-vulnerabilities
blogs.perl.org/users/neilb/2021/11/addressing-cpan-vulnerabilities-related-to-checksums.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SZ32AJIV4RHJMLWLU5QULGKMMIHYOMDC
lists.debian.org/debian-lts-announce/2024/10/msg00017.html
Show 30 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-16156
github.com/advisories/GHSA-mx9v-6qg3-92rp
access.redhat.com/errata/RHSA-2025:8432
bugzilla.redhat.com/2035273
errata.almalinux.org/8/ALSA-2025-8432.html
docs.bell-sw.com/security/cves/CVE-2020-16156
errata.cloudlinux.com/ol6/CLSA-2022-1668032518.html
errata.tuxcare.com/els_os/centos-stream8els/CLSA-2025-1750165585.html
security-tracker.debian.org/tracker/CVE-2020-16156
advisories.mageia.org/MGASA-2022-0018.html
bugs.mageia.org/show_bug.cgi?id=29878
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8432.json
cve.org/CVERecord?id=CVE-2020-16156
errata.rockylinux.org/RLSA-2025:8432
ubuntu.com/security/CVE-2020-16156