perl-modules-5.28 vulnerabilities (TuxCare)
8 vulnerabilities.
perl-modules-5.28TuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra…9.1 Criticalperl-modules-5.28TuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack8.4 Highperl-modules-5.28TuxCareStorable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record9.8 Criticalperl-modules-5.28TuxCareIO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob7.3 Highperl-modules-5.28TuxCareArchive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header7.5 Highperl-modules-5.28TuxCareArchive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory9.1 Criticalperl-modules-5.28TuxCarePerl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds9.8 Criticalperl-modules-5.28TuxCareCPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.8.1 High