209 matches found
cve-2015-1592
These files were discussed in my Houston Perl Mongers talk about "Weaponizing Perl Serialization Flaws With MetaSploit". The video of the talk that explains these files is available here: https://youtu.be/Gzx6KlqiIZE The storable-.pl files are used to generate the 'config' parameter values used i...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS : Perl vulnerabilities (USN-8675-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8675-1 advisory. It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker...
Medium: perl-Storable
Issue Overview: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls avextend with that count plus one. A count of I32MAX wraps the addition to a negati...
Medium: perl-Storable
Issue Overview: Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls avextend with that count plus one. A count of I32MAX wraps the addition to a negati...
EulerOS 2.0 SP13 : perl-Storable (EulerOS-SA-2026-4089)
According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...
EulerOS 2.0 SP11 : perl-Storable (EulerOS-SA-2026-4272)
According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...
Amazon Linux 2023 : perl-Storable, perl-Storable-tests (ALAS2023-2026-3203)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3203 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed 32-bit item count from an SXHOOK record and calls...
Amazon Linux 2 : perl-Storable (ALAS-2026-3989)
The version of perl-Storable installed on the remote host is prior to 2.45-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3989 advisory. Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record...
EulerOS 2.0 SP13 : perl-Storable (EulerOS-SA-2026-4180)
According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...
EulerOS 2.0 SP11 : perl-Storable (EulerOS-SA-2026-4362)
According to the versions of the perl-Storable packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads ...
EulerOS 2.0 SP11 : perl (EulerOS-SA-2026-4267)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed...
EulerOS 2.0 SP11 : perl (EulerOS-SA-2026-4357)
According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SXHOOK record. retrievehookcommon reads a signed...
USN-8675-2 perl vulnerabilities
USN-8675-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 26.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an...
USN-8675-2: Perl vulnerabilities
USN-8675-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 26.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an...
CLSA-2026-1788334635 Fix CVE(s): CVE-2026-57433, CVE-2026-9538
SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/fixes/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehookcommon in dist/Storable/Storable.xs before it is incremented and passed to avextend;...
CLSA-2026-1788194548 Fix CVE(s): CVE-2026-57433
SECURITY UPDATE: denial of service via signed integer overflow when deserializing a crafted Storable blob - debian/patches/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehookcommon in dist/Storable/Storable.xs before it is incremented and passed to avextend; backported...
CLSA-2026-1788175793 Fix CVE(s): CVE-2026-57433
SECURITY UPDATE: signed integer overflow in Storable SXHOOK deserialization - debian/patches/fixes/CVE-2026-57433.patch: croak on a hook data item count of I32MAX before avextend is called with an overflowed negative count in retrievehook in dist/Storable/Storable.xs - CVE-2026-57433...
CLSA-2026-1788175535 Fix CVE(s): CVE-2026-57433
SECURITY UPDATE: signed integer overflow when deserializing a crafted Storable SXHOOK record - debian/patches/CVE-2026-57433.patch: reject a hook data item count of I32MAX in retrievehook in dist/Storable/Storable.xs before it is incremented and passed to avextend - CVE-2026-57433...
USN-8675-1: Perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...
USN-8675-1 perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. CVE-2026-12087 It was discovered that Perl incorrectly handled regular expressions...