CVE-2017-20230

The perl-Storable component (versions before 3.05 ) is vulnerable to a stack overflow . The root cause exists in the retrieve_hook function, which stores the length of the class name as a signed integer but processes it as an unsigned integer during read operations. This discrepancy allows an att...

Perl 安全漏洞

Perl is a general-purpose, interpreted, dynamic, and cross-platform programming language developed by the Perl community. Versions of Perl prior to 3.05 contained security vulnerabilities. These vulnerabilities stemmed from the retrievehook function, which stored the length of class names as...

perl-Storable: Storable for Perl: Denial of service via stack overflow in retrieve_hook function

A flaw was found in Storable for Perl. A remote attacker can exploit a vulnerability in the retrievehook function by crafting malicious data. This flaw occurs because the function incorrectly handles the length of class names, storing it as a signed integer but processing it as unsigned during re...