55 matches found
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-2163)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5689-1: Perl vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature...
Ubuntu 22.10 : Perl vulnerability (USN-5689-2)
The remote Ubuntu 22.10 host has packages installed that are affected by a vulnerability as referenced in the USN-5689-2 advisory. USN-5689-1 fixed a vulnerability in Perl. This update provides the corresponding update for Ubuntu 22.10. Tenable has extracted the preceding description block direct...
CLSA-2022-1668467714 perl: Fix of CVE-2020-16156
CVE-2020-16156: fix signature verification bypass...
CLSA-2022-1668122645 perl: Fix of CVE-2020-16156
CVE-2020-16156: fix signature verification bypass...
perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
CLSA-2022-1668120434 perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
CLSA-2022-1668118081 Fix CVE(s): CVE-2020-16156
SECURITY UPDATE: Signature verification bypass - debian/patches/fixes/CVE-2020-16156.patch: recognize CANNOTVERIFY signature verification type, add two new failure modes based on 'cpanpath' and improve interaction with external 'gpg' executable. - CVE-2020-16156...
CLSA-2022-1668032518 perl: Fix of CVE-2020-16156
CVE-2020-16156: recognize CANNOTVERIFY signature verification type...
Ubuntu: Security Advisory (USN-5689-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Perl vulnerability (USN-5689-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5689-1 advisory. It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this iss...
Huawei EulerOS: Security Advisory for perl-CPAN (EulerOS-SA-2022-2581)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.6.0 : perl-CPAN (EulerOS-SA-2022-2581)
According to the versions of the perl-CPAN package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Tenable Network Security has extracted the preceding...
Amazon Linux 2022 : perl-CPAN, perl-CPAN-tests (ALAS2022-2022-072)
It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-072 advisory. A flaw was found in the way the perl-CPAN performed verification of package signatures stored in CHECKSUMS files. A malicious or compromised CPAN server used by a user, or a man-in-the-middle attacker,...
EulerOS 2.0 SP8 : perl-CPAN (EulerOS-SA-2022-1358)
According to the versions of the perl-CPAN package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Note that Tenable Network Security has extracted the preceding description bloc...
Bentley Systems MicroStation Resource Management Error Vulnerability (CNVD-2022-16156)
Bentley Systems MicroStation is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, USA. A resource management error vulnerability exists in Bentley Systems MicroStation, which can be exploited by an attacker to execute code in the context of the current process...
Mageia: Security Advisory (MGASA-2022-0018)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0018 Updated perl-CPAN packages fix security vulnerability
CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156...
CVE-2020-16156
A flaw was found in the way the perl-CPAN performed verification of package signatures stored in CHECKSUMS files. A malicious or compromised CPAN server used by a user, or a man-in-the-middle attacker, could use this flaw to bypass signature verification. Mitigation This issue can be mitigated by...
