OESA-2023-1390 perl security update

🗓️ 01 Jul 2023 11:05:28Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Perl update fixes insecure TLS default in HTTP::Tiny before 0.083 and adds certificate verification (vulnerability 2023 31486).

Reporter	Title	Published	Views	Family All 188
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for June 2024.	29 Jan 202521:09	–	ibm
IBM Security Bulletins	Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	10 May 202415:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in HTTP::Tiny affects IBM Netezza Appliance	16 Dec 202509:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in Perl HTTP [CVE-2023-31486]	29 Feb 202420:13	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to sensitive information exposure due to Perl (CVE-2023-31484 and CVE-2023-31486)	2 Nov 202317:31	–	ibm
Tenable Nessus	Amazon Linux 2023 : perl-HTTP-Tiny, perl-HTTP-Tiny-tests (ALAS2023-2023-216)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : perl-Pod-Perldoc (ALAS2023-2023-217)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2023-218)	28 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-HTTP-Tiny (ALAS-2023-2093)	1 Jul 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl-Pod-Perldoc (ALAS-2023-2094)	1 Jul 202300:00	–	nessus

Source	Link
openeuler	www.openeuler.org/en/security/safety-bulletin/detail.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-31486

03 Sep 2025 06:19Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.18.1

EPSS0.00767

SSVC