perl vulnerabilities (Debian)
85 vulnerabilities.
-
perlDebian Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width 7.5 High -
perlDebian Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass 5.3 Medium -
perlDebian Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch 5.7 Medium -
perlDebian Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perlDebian Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack 8.4 High -
perlDebian Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record 9.8 Critical -
perlDebian HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets 7.1 High -
perlDebian Module::Load versions before 0.22 for Perl allow arbitrary modules outside of @INC to be loaded 9.8 Critical -
perlDebian Socket versions before 2.041 for Perl have an out-of-bounds heap read 9.1 Critical -
perlDebian IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 7.3 High -
perlDebian IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID 7.3 High -
perlDebian IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward 7.5 High -
perlDebian IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date 5.5 Medium -
perlDebian Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header 7.5 High -
perlDebian Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory 7.5 High -
perlDebian Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory 9.1 Critical -
perlDebian Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds 9.8 Critical -
perlDebian HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values 6.5 Medium -
perlDebian Storable versions before 3.05 for Perl has a stack overflow 10.0 Critical -
perlDebian Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib 9.8 Critical -
perlDebian Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perlDebian Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes 8.4 High -
perlDebian Perl: write past buffer end via illegal user-defined unicode property 7.0 High -
perlDebian In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to... 9.8 Critical -
perlDebian HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... 8.1 High -
perlDebian CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 8.1 High -
perlDebian CPAN 2.28 allows Signature Verification Bypass. 7.8 High -
perlDebian Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a... 7.8 High -
perlDebian CVE-2020-12723 does not affect BellSoft software 7.5 High -
perlDebian CVE-2020-10878 does not affect BellSoft software 8.6 High -
perlDebian CVE-2020-10543 does not affect BellSoft software 8.2 High -
perlDebian _is_safe in the File::Temp module for Perl does not properly handle symlinks. 3.3 Low -
perlDebian Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid... 9.8 Critical -
perlDebian Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers... 9.1 Critical -
perlDebian Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlDebian Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlDebian In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... 7.5 High -
perlDebian Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent... 9.8 Critical -
perlDebian An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular... 7.5 High -
perlDebian An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap... 9.8 Critical -
perlDebian Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26... 9.1 Critical -
perlDebian Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and... 7.5 High -
perlDebian Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for... 5.9 Medium -
perlDebian The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a... 7.8 High -
perlDebian (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... 7.8 High -
perlDebian The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5... 7.5 High -
perlDebian Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child... 7.5 High -
perlDebian The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does... 7.3 High -
perlDebian Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and... 7.5 High -
perlDebian The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows... 2.1 Low - Show olderLoading…