Arbitrary file read vulnerability in perl

Perl is a feature-rich computer programming language that runs on over 100 computer platforms and is suitable for a wide range of applications, from mainframes to portable devices, and from rapid prototyping to massively scalable development. An arbitrary file read vulnerability exists in perl,...

openSUSE: Security Advisory for amavisd-new (openSUSE-SU-2019:0297-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

openSUSE Security Update : amavisd-new (openSUSE-2019-297)

This update for amavisd-new fixes the following issues : Security issue fixed : - CVE-2016-1238: Workedaround a perl vulnerability by removing a trailing dot element from @INCbsc987887. Other issues addressed : - update to version 2.11.1 bsc1123389. - amavis-services: bumping up syslog level from...

Security update for amavisd-new (moderate)

openSUSE Security Update: Security update for amavisd-new Announcement ID: openSUSE-SU-2019:0297-1 Rating: moderate References: 1123389 987887 Cross-References: CVE-2016-1238 Affected Products: openSUSE Leap 15.0 An update that solves one vulnerability and has one errata is now available...

Security Bulletin: A vulnerability in Perl affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Perl. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-18311 DESCRIPTION: Perl is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the Perlmysetenv function. By sending a specially-crafte...

The vulnerability of the Perl_my_setenv function in the Perl programming language, related to errors in processing regular expressions, allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the Perlmysetenv function in “util.c” of the Perl programming language is related to errors in processing regular expressions. This leads to copying data into a buffer without checking the size of the input data, resulting in integer overflow. Exploiting this vulnerability ca...

SUSE-SU-2019:0505-1 Security update for amavisd-new

This update for amavisd-new fixes the following issues: wmavisd-new was updated to version 2.11.1 bsc1123389: removed a trailing dot element from @INC, as a workaround for a perl vulnerability CVE-2016-1238 bsc987887 amavis-services: bumping up syslog level from LOGNOTICE to LOGERR for a message...

SUSE SLED15 / SLES15 Security Update : amavisd-new (SUSE-SU-2019:0505-1)

This update for amavisd-new fixes the following issues : wmavisd-new was updated to version 2.11.1 bsc1123389 : removed a trailing dot element from @INC, as a workaround for a perl vulnerability CVE-2016-1238 bsc987887 amavis-services: bumping up syslog level from LOGNOTICE to LOGERR for a messag...

The vulnerability of the Archive::Tar module in the Perl programming language allows a hacker to bypass established access controls and compromise the integrity of information.

The vulnerability of the Archive::Tar module in the Perl programming language is related to a flaw in the mechanism for protecting against directory traversal attacks. Exploiting this vulnerability allows an attacker to bypass established access controls and re-record any file through an archive...

Remote Code Execution (RCE)

perl is vulnerable to remote code execution. An buffer overflow resulting from an integer overflow in Perlmysetenv allows a remote attacker to execute arbitrary code via a malicious regular expression that causes invalid write operations...

perl: Heap-based buffer overflow in S_handle_regex_sets()

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

DEBIAN-CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

ALPINE-CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

UBUNTU-CVE-2018-18312

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations...

SUSE-SU-2018:1992-1 Security update for perl

This update for perl fixes the following issues: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files bsc1096718...

SUSE-SU-2018:1977-1 Security update for perl

This update for perl fixes the following issues: - CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files bsc1096718...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Perl vulnerability (USN-3684-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-3684-1 advisory. It was discovered that Perl incorrectly handled certain archive files. An attacker could possibly use this to overwrite arbitrary files...

USN-3684-1 perl vulnerability

It was discovered that Perl incorrectly handled certain archive files. An attacker could possibly use this to overwrite arbitrary files...

Heap overflow

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...

ALPINE-CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...