perl vulnerabilities (Root)
18 vulnerabilities.
-
perlRoot Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatting a POD document whose =over nesting drives the margin to the output width 7.5 High -
perlRoot Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perlRoot Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack 8.4 High -
perlRoot Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record 9.8 Critical -
perlRoot HTTP::Tiny versions before 0.095 for Perl forward credential headers to cross-origin redirect targets 7.1 High -
perlRoot Socket versions before 2.041 for Perl have an out-of-bounds heap read 9.1 Critical -
perlRoot IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 7.3 High -
perlRoot IO::Compress versions from 2.207 before 2.220 for Perl ship a zipdetails CLI tool that crashes with undefined subroutine on Info-ZIP Unix Extra Field with 8-byte UID or GID 7.3 High -
perlRoot IO::Uncompress::Unzip versions before 2.220 for Perl allow CPU exhaustion via per-byte read loop in fastForward 7.5 High -
perlRoot IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date 5.5 Medium -
perlRoot Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header 7.5 High -
perlRoot Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory 7.5 High -
perlRoot Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory 9.1 Critical -
perlRoot Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds 9.8 Critical -
perlRoot HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values 6.5 Medium -
perlRoot Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perlRoot HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... 8.1 High -
perlRoot _is_safe in the File::Temp module for Perl does not properly handle symlinks. 3.3 Low