CVE-2016-1238

CWE-2648 documents7 sources
Severity
7.8HIGH
EPSS
0.3%
top 44.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Rrwo Linux::statm::tinyApache SpamassassinDebian Debian Linux+3 more
Timeline
PublishedAug 2
Latest updateMay 14

Description

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages5 packages

▶Debianperl< 5.22.2-3+3
▶NVDperl/perl188 versions+187
▶NVDapache/spamassassin< 3.4.2
▶CVEListV5rrwo/linux::statm::tiny< 0.0701
▶NVDopensuse/leap15.0

Also affects: Debian Linux 8.0, Fedora 23, 24

🔴Vulnerability Details

3
GHSA
GHSA-hm5v-6984-hfqp: (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/s↗2022-05-14
▶
CVEList
CVE-2016-1238: (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/s↗2016-08-02
▶
OSV
CVE-2016-1238: (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/s↗2016-08-02
▶

📋Vendor Advisories

2
Red Hat
perl: loading of modules from current directory↗2016-07-25
▶
Debian
CVE-2016-1238: perl - (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archi...↗2016
▶

💬Community

2
Bugzilla
CVE-2016-1238 perl: loading of modules from current directory [fedora-all]↗2016-07-26
▶
Bugzilla
CVE-2016-1238 perl: loading of modules from current directory↗2016-07-12
▶
CVE-2016-1238 (HIGH CVSS 7.8) | (1) cpan/Archive-Tar/bin/ptar | cvebase.io