perl perl vulnerabilities and exploits

(subscribe to this query)

Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module prior to 2.19.0 for Perl allow remote PostgreSQL database servers to cause a denial of service (process crash) via format string specifiers in (1) a crafted database warning to the...

Perl Perl Perl Perl 0.1 Perl Perl 0.2 Perl Perl 0.3 Perl Perl 0.4 Perl Perl 0.5 Perl Perl 0.52 Perl Perl 0.61 Perl Perl 0.62 Perl Perl 0.63 Perl Perl 0.64 Perl Perl 0.65

The bsd_glob function in the File::Glob module for Perl prior to 5.14.2 allows context-dependent malicious users to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

Perl Perl Perl Perl 1.00 Perl Perl 1.01 Perl Perl 1.20 Perl Perl 1.21 Perl Perl 1.22 Perl Perl 1.31 Perl Perl 1.32 Perl Perl 1.40 Perl Perl 1.41 Perl Perl 1.42 Perl Perl 1.43

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpa...

Debian Debian Linux 8.0 Fedoraproject Fedora 23 Fedoraproject Fedora 24 Perl Perl 1.0.15 Perl Perl 1.0.16 Perl Perl 5.000 Perl Perl 5.000o Perl Perl 5.001 Perl Perl 5.001n Perl Perl 5.002 Perl Perl 5.002 01 Perl Perl 5.003

3 Github repositories

The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl prior to 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent malicious users to execute arbitrary co...

Perl Perl Perl Perl 5.10 Perl Perl 5.10.0 Perl Perl 5.10.1 Perl Perl 5.11.0 Perl Perl 5.11.1 Perl Perl 5.11.2 Perl Perl 5.11.3 Perl Perl 5.11.4 Perl Perl 5.11.5 Perl Perl 5.12.0 Perl Perl 5.12.1

2 EDB exploits

The rehash mechanism in Perl 5.8.2 up to and including 5.16.x allows context-dependent malicious users to cause a denial of service (memory consumption and crash) via a crafted hash key.

Perl Perl 5.8.2 Perl Perl 5.8.3 Perl Perl 5.8.4 Perl Perl 5.8.5 Perl Perl 5.8.6 Perl Perl 5.8.7 Perl Perl 5.8.8 Perl Perl 5.8.9 Perl Perl 5.8.10 Perl Perl 5.10 Perl Perl 5.10.0 Perl Perl 5.10.1

The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x up to and including 5.12.3, and 5.13.x up to and including 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependen...

Perl Perl 5.10.0 Perl Perl 5.10.1 Perl Perl 5.13.0 Perl Perl 5.13.1 Perl Perl 5.13.2 Perl Perl 5.13.3 Perl Perl 5.13.4 Perl Perl 5.13.5 Perl Perl 5.13.6 Perl Perl 5.13.7 Perl Perl 5.13.8 Perl Perl 5.13.9

1 EDB exploit

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent malicious users to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.

Perl Perl 5.8.1 Perl Perl 5.8.2 Perl Perl 5.8.3 Perl Perl 5.8.4 Perl Perl 5.8.5 Perl Perl 5.8.6 Perl Perl 5.8.7 Perl Perl 5.8.8 Perl Perl 5.8.9

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x prior to 5.12.5, 5.14.x prior to 5.14.3, and 5.15.x prior to 15.15.5 allows context-dependent malicious users to cause a denial of service (memory consumption and crash) or possibly execute arbitra...

Perl Perl 5.12.0 Perl Perl 5.12.1 Perl Perl 5.12.2 Perl Perl 5.12.3 Perl Perl 5.12.4 Perl Perl 5.14.0 Perl Perl 5.14.1 Perl Perl 5.14.2

The Mail::Mailer Perl module in the perl-MailTools package 1.47 and previous versions uses mailx as the default mailer, which allows remote malicious users to execute arbitrary commands by inserting them into the mail body, which is then processed by mailx.

Perl-mailtools Perl-mailtools 1.13 Perl-mailtools Perl-mailtools 1.15 Perl-mailtools Perl-mailtools 1.40 Perl-mailtools Perl-mailtools 1.42 Perl-mailtools Perl-mailtools 1.44 Perl-mailtools Perl-mailtools 1.47 Perl-mailtools Perl-mailtools 1.1401

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent malicious users to cause a denial of service (assertion failure and application exit) via crafted input that is not properly...

Perl Perl 5.10 Perl Perl 5.12.0 Perl Perl 5.14.0

1 EDB exploit

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook