CVE-2011-2728
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent...
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
Exploit likelihood
What each source reports
NVD Score used
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
CVE-2011-2728- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
CVE-2011-2728- Updated
- 2026-11-02
EUVDEUVD-2011-2706 No score
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
EUVD-2011-2706- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8m64-rq77-cfmc No score
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent...
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
GHSA-8m64-rq77-cfmc- Updated
- 2026-11-02
OSV No score
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
CVE-2011-2728- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2728 No score
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
- Record
DEBIAN-CVE-2011-2728- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-2728 is a medium vulnerability (CVSS 4.3) in Perl, published December 21, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in perl 5.14.2-1.
References
cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod
perl5.git.perl.org/perl.git/commit/1af4051e077438976a4c12a0622feaf6715bec77
blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_of1
lists.fedoraproject.org/pipermail/package-announce/2011-November/069752.html
securityfocus.com/bid/49858
secunia.com/advisories/46172