CVE-2011-0761

2011-05-1317:05:41

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.017

Percentile

88.0%

JSON

Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) by leveraging an ability to inject arguments into a (1) getpeername, (2) readdir, (3) closedir, (4) getsockname, (5) rewinddir, (6) tell, or (7) telldir function call.

Affected configurations

Nvd

Node

perlperlMatch5.10.0

perlperlMatch5.10.0rc1

perlperlMatch5.10.0rc2

perlperlMatch5.10.1

perlperlMatch5.10.1rc1

perlperlMatch5.10.1rc2

VendorProductVersionCPE
perlperl5.10.0cpe:2.3:a:perl:perl:5.10.0:*:*:*:*:*:*:*
perlperl5.10.0cpe:2.3:a:perl:perl:5.10.0:rc1:*:*:*:*:*:*
perlperl5.10.0cpe:2.3:a:perl:perl:5.10.0:rc2:*:*:*:*:*:*
perlperl5.10.1cpe:2.3:a:perl:perl:5.10.1:*:*:*:*:*:*:*
perlperl5.10.1cpe:2.3:a:perl:perl:5.10.1:rc1:*:*:*:*:*:*
perlperl5.10.1cpe:2.3:a:perl:perl:5.10.1:rc2:*:*:*:*:*:*

Vendor	Product	Version	CPE
perl	perl	5.10.0	cpe:2.3:a:perl:perl:5.10.0:::::::*
perl	perl	5.10.0	cpe:2.3:a:perl:perl:5.10.0:rc1::::::
perl	perl	5.10.0	cpe:2.3:a:perl:perl:5.10.0:rc2::::::
perl	perl	5.10.1	cpe:2.3:a:perl:perl:5.10.1:::::::*
perl	perl	5.10.1	cpe:2.3:a:perl:perl:5.10.1:rc1::::::
perl	perl	5.10.1	cpe:2.3:a:perl:perl:5.10.1:rc2::::::