CBL Mariner 2.0 Security Update: perl (CVE-2025-40909)

The version of perl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-40909 advisory. - Perl threads have a working directory race condition where file operations May target unintended paths. If a...

USN-7678-1: Perl vulnerability

It was discovered that Perl threads incorrectly handled certain file operations. A local attacker could possibly use this issue to load code or access files from unexpected locations...

RHEL 10 : perl (RHSA-2025:12056)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:12056 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl...

RHEL 8 : perl (RHSA-2025:11805)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11805 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: perl: Perl...

AlmaLinux 8 : perl (ALSA-2025:11805)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:11805 advisory. perl: Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 Tenable has extracted the preceding...

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2025-1834)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2025-40924

Catalyst::Plugin::Session before version 0.44 for Perl generates session ids insecurely. The session id is generated from a usually SHA-1 hash of a simple counter, the epoch time, the built-in rand function, the PID and the current Catalyst context. This information is of low entropy. The PID wil...

CVE-2025-40919

Authen::DigestMD5 versions 0.01 through 0.02 for Perl generate the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, if it is not...

CVE-2025-40918 Authen::SASL::Perl::DIGEST_MD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely

Authen::SASL::Perl::DIGESTMD5 versions 2.04 through 2.1800 for Perl generates the cnonce insecurely. The cnonce client nonce is generated from an MD5 hash of the PID, the epoch time and the built-in rand function. The PID will come from a small set of numbers, and the epoch time may be guessed, i...

PT-2025-29337 · Undefined · Undefined

🔴 Urgent Fedora 42 Alert: A critical Perl vulnerability CVE-2025-30244ebfc7 allows remote code execution via regex exploits. Patch now or risk supply-chain breaches. Read more: 👉 https://t.co/is44pekhed LinuxSecurity DevOps CyberRisk https://t.co/YIkx08S1R4...

EulerOS 2.0 SP13 : perl (EulerOS-SA-2025-1710)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions...

EulerOS 2.0 SP13 : perl (EulerOS-SA-2025-1695)

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions...

CVE-2025-40910

Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses. Leading zeros are used to indicate octal numbers, which can confuse users who are intentionally usi...

CVE-2025-40910

Net::IP::LPM (Perl) 1.10 is affected by a vulnerability where leading zero characters in IP CIDR strings are not properly handled, potentially allowing bypass of IP-based access controls. The CVE entry notes that leading zeros can indicate octal notation, creating ambiguity for users and enabling...

Oracle Linux 10 : perl (ELSA-2025-7500)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7500 advisory. 4:5.40.2-512.1 - 5.40.2 bump see - Resolves: RHEL-87186 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory...

Amazon Linux 2 : perl-File-Find-Rule-Perl (ALAS-2025-2908)

The version of perl-File-Find-Rule-Perl installed on the remote host is prior to 1.13-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2908 advisory. File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted...

Medium: perl-YAML-LibYAML

Issue Overview: YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified CVE-2025-40908 Affected Packages: perl-YAML-LibYAML Issue Correction: Run dnf update perl-YAML-LibYAML --releasever 2023.7.20250623 to update your system. New Packages: aarch64: ...

Amazon Linux 2023 : perl-File-Find-Rule-Perl (ALAS2023-2025-1047)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1047 advisory. File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when grep encounters a crafted filename. A file handle is opened with the 2 argument form of open allowing an attacker...

Astra Linux – Vulnerability in Perl

A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38, and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand side of the tr operator, Sdotransinvmap can overflow the destination...

Astra Linux – Vulnerability in libfile-find-rule-perl

File::Find::Rule in Perl version 0.34 is vulnerable to arbitrary code execution when grep encounters a crafted filename. A file handle is opened using the 2-argument form of open, allowing an attacker-controlled filename to specify the MODE parameter, thereby turning the filename into an executab...