CVE-2011-3597

Synopsis Moderate: perl security update Type/Severity Security Advisory: Moderate Topic Updated perl packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 4 and 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerabili ...

Perl programs could be made to crash or run programs if they receive specially crafted network traffic or other input ...

Debian Bug report logs - #644108 unsafe use of eval in Digest->new() Package: perl; Maintainer for perl is Niko Tyni <ntyni@debianorg>; Source for perl is src:perl (PTS, buildd, popcon) Reported by: Ansgar Burchardt <ansgar@debianorg> Date: Sun, 2 Oct 2011 21:48:01 UTC Severity: important Tags: security, upstr ...

Debian Bug report logs - #637376 perl: [CVE-2011-2939] Encode security: Unicodexs!decode_xs n-byte heap-overflow Package: perl; Maintainer for perl is Niko Tyni <ntyni@debianorg>; Source for perl is src:perl (PTS, buildd, popcon) Reported by: Dominic Hargreaves <dom@earthli> Date: Wed, 10 Aug 2011 17:57:02 UTC Se ...

A heap-based buffer overflow flaw was found in the way Perl decoded Unicode strings An attacker could create a malicious Unicode string that, when decoded by a Perl program, would cause the program to crash or, potentially, execute arbitrary code with the permissions of the user running the program (CVE-2011-2939) It was found that the "new" cons ...