CVE-2019-25777

The YAML library for Perl (versions before 1.27_001 ) is vulnerable to arbitrary code execution due to an improper control of dynamically-identified variables during the loading of perl/glob documents. An attacker can provide a document that replaces package variables, such as $YAML::LoadCode or ...

EUVD-2019-20205

YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...

SUSE CVE-2011-2728

The bsdglob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service crash via a glob expression with the GLOBALTDIRFUNC flag, which triggers an uninitialized pointer dereference...