CVE-2023-31486

2023-04-2900:15:09

Debian Security Bug Tracker

security-tracker.debian.org

0.002 Low

EPSS

Percentile

61.8%

JSON

HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates.

OSVersionArchitecturePackageVersionFilename
Debian12alllibhttp-tiny-perl<= 0.082-2libhttp-tiny-perl_0.082-2_all.deb
Debian10alllibhttp-tiny-perl<= 0.076-1libhttp-tiny-perl_0.076-1_all.deb
Debian999alllibhttp-tiny-perl< 0.088-1libhttp-tiny-perl_0.088-1_all.deb
Debian13alllibhttp-tiny-perl< 0.088-1libhttp-tiny-perl_0.088-1_all.deb
Debian12allperl<= 5.36.0-7+deb12u1perl_5.36.0-7+deb12u1_all.deb
Debian11allperl<= 5.32.1-4+deb11u3perl_5.32.1-4+deb11u3_all.deb
Debian10allperl<= 5.28.1-6+deb10u1perl_5.28.1-6+deb10u1_all.deb
Debian999allperl< 5.38.2-2perl_5.38.2-2_all.deb
Debian13allperl< 5.38.2-2perl_5.38.2-2_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libhttp-tiny-perl	<= 0.082-2	libhttp-tiny-perl_0.082-2_all.deb
Debian	10	all	libhttp-tiny-perl	<= 0.076-1	libhttp-tiny-perl_0.076-1_all.deb
Debian	999	all	libhttp-tiny-perl	< 0.088-1	libhttp-tiny-perl_0.088-1_all.deb
Debian	13	all	libhttp-tiny-perl	< 0.088-1	libhttp-tiny-perl_0.088-1_all.deb
Debian	12	all	perl	<= 5.36.0-7+deb12u1	perl_5.36.0-7+deb12u1_all.deb
Debian	11	all	perl	<= 5.32.1-4+deb11u3	perl_5.32.1-4+deb11u3_all.deb
Debian	10	all	perl	<= 5.28.1-6+deb10u1	perl_5.28.1-6+deb10u1_all.deb
Debian	999	all	perl	< 5.38.2-2	perl_5.38.2-2_all.deb
Debian	13	all	perl	< 5.38.2-2	perl_5.38.2-2_all.deb