Debian Perl vulnerabilities

CVE-2010-4777 [MEDIUM] CVE-2010-4777: perl - The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and ot... The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSI

CVE-2023-31486 [HIGH] CVE-2023-31486: libhttp-tiny-perl - HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalon... HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. Scope: local bookworm: open forky: resolved (fixed in 0.088-1) sid: resolved (fixed in 0.088-1) trixie: resolved (fixed in 0.088-1)

CVE-2010-1168 [HIGH] CVE-2010-1168: perl - The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent atta... The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods." S

CVE-2024-56406 [HIGH] CVE-2024-56406: perl - A heap buffer overflow vulnerability was discovered in Perl. Release branches ... A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' S

CVE-2017-12837 [HIGH] CVE-2017-12837: perl - Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 befo... Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier. Scope: local bookworm: resolved (fixed in 5.26.0-8) bullseye: resolved (fixed in 5.26.0-8) f

CVE-2020-12723 [HIGH] CVE-2020-12723: perl - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular e... regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. Scope: local bookworm: resolved (fixed in 5.30.3-1) bullseye: resolved (fixed in 5.30.3-1) forky: resolved (fixed in 5.30.3-1) sid: resolved (fixed in 5.30.3-1) trixie: resolved (fixed in 5.30.3-1)

CVE-2012-5195 [HIGH] CVE-2012-5195: perl - Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12... Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator. Scope: local bookworm: resolved (fixed in 5.14.2-14) bullseye

CVE-2015-8607 [HIGH] CVE-2015-8607: perl - The canonpath function in the File::Spec module in PathTools before 3.62, as use... The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. Scope: local bookworm: resolved (fixed in 5.22.1-4) bullseye: resolved (fixed in 5.22.1-4) forky: resolved (fixed in

CVE-2023-47038 [HIGH] CVE-2023-47038: perl - A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when ... A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer. Scope: local bookworm: resolved (fixed in 5.36.0-7+deb12u1) bullseye: resolved (fixed in 5.32.1-4+deb11u3) forky: resolved (fixed in 5.36.0-10) sid: reso

CVE-2023-31484 [HIGH] CVE-2023-31484: perl - CPAN.pm before 2.35 does not verify TLS certificates when downloading distributi... CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. Scope: local bookworm: resolved (fixed in 5.36.0-7+deb12u3) bullseye: resolved (fixed in 5.32.1-4+deb11u4) forky: resolved (fixed in 5.38.2-2) sid: resolved (fixed in 5.38.2-2) trixie: resolved (fixed in 5.38.2-2)

CVE-2018-6798 [HIGH] CVE-2018-6798: perl - An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dep... An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure. Scope: local bookworm: resolved (fixed in 5.26.1-6) bullseye: resolved (fixed in 5.26.1-6) forky: resolved (fixed in 5.26.1-6) sid: resolved (fixed in 5.26.1-6) trixie: resolved (fixed in

CVE-2016-1238 [HIGH] CVE-2016-1238: perl - (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archi... (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/z

CVE-2007-5116 [HIGH] CVE-2007-5116: perl - Buffer overflow in the polymorphic opcode support in the Regular Expression Engi... Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression. Scope: local bookworm: resolved (fixed in 5.8.8-12) bullseye: resolved (fixed in 5.8.8-12) forky: resolved (fixed in 5.8.8-12) si

CVE-2021-36770 [HIGH] CVE-2021-36770: libencode-perl - Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain pri... Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator eva

CVE-2008-2827 [LOW] CVE-2008-2827: perl - The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check per... The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448 and CVE-2004-0452. Scope: local bookworm: resolved (fixed in 5.10.0-11) bullseye: resolved (fixed in 5.10.0-11) forky: re

CVE-2005-0156 [LOW] CVE-2005-0156: perl - Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with ... Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to execute arbitrary code by setting the PERLIO_DEBUG variable and executing a Perl script whose full pathname contains a long directory tree. Scope: local bookworm: resolved (fixed in 5.8.4-6) bullseye: resolved (fixed in 5.8.4-6) forky: resolved (fi

CVE-2016-6185 [HIGH] CVE-2016-6185: perl - The XSLoader::load method in XSLoader in Perl does not properly locate .so files... The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory. Scope: local bookworm: resolved (fixed in 5.22.2-2) bullseye: resolved (fixed in 5.22.2-2) forky: resolved (fixed in 5.22.2-2) sid: resolved (

CVE-2005-0155 [MEDIUM] CVE-2005-0155: perl - The PerlIO implementation in Perl 5.8.0, when installed with setuid support (spe... The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to create arbitrary files via the PERLIO_DEBUG variable. Scope: local bookworm: resolved (fixed in 5.8.4-6) bullseye: resolved (fixed in 5.8.4-6) forky: resolved (fixed in 5.8.4-6) sid: resolved (fixed in 5.8.4-6) trixie: resolved (fixed in 5.8.4-6)

CVE-2013-7422 [HIGH] CVE-2013-7422: perl - Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before... Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, allows context-dependent attackers to execute arbitrary code or cause a denial of service (application crash) via a long digit string associated with an invalid backreference within a regular expression. Scope: local bookworm: resolved (fixed in 5.20.0-1) bullseye

CVE-2015-8853 [HIGH] CVE-2015-8853: perl - The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c ... The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by "a\x80." Scope: local bookworm: resolved (fixed in 5.22.1-1) bullseye: resolved (fixed in 5.22.1-1) forky: resolved (fixed in 5.22.1-1) sid: resolved