CPANSA-File-Glob-2011-2728: perl vulnerability
| Publisher | giterlizzi | Document category | csaf_security_advisory |
|---|---|---|---|
| Initial release date | 2012-12-21T00:00:00 | Engine | CSAF Perl Toolkit 0.25 |
| Current release date | 2012-12-21T00:00:00 | Build Date | |
| Current version | 1 | Status | final |
| CVSS v3.1 Base Score | Severity | ||
| Original language | Language | en | |
| Also referred to | |||
Vulnerability Description
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
Vulnerabilities
CVE-2011-2728
Vulnerability DescriptionThe bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
Product status
Known affected
| Product | Score | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| perl less than 1.13 |
|
Fixed
- perl greater than or equal 1.13
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
- CPANSA-File-Glob-2011-2728 JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2012/cpansa-file-glob-2011-2728.json - http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069752.html external
http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069752.html - http://www.securityfocus.com/bid/49858 external
http://www.securityfocus.com/bid/49858 - http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod external
http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod - http://perl5.git.perl.org/perl.git/commit/1af4051e077438976a4c12a0622feaf6715bec77 external
http://perl5.git.perl.org/perl.git/commit/1af4051e077438976a4c12a0622feaf6715bec77 - http://secunia.com/advisories/46172 external
http://secunia.com/advisories/46172 - https://blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_of1 external
https://blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_of1 - https://bugzilla.redhat.com/show_bug.cgi?id=742987 external
https://bugzilla.redhat.com/show_bug.cgi?id=742987 - CVE-2011-2728 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2011-2728
Revision history
| Version | Date of the revision | Summary of the revision |
|---|---|---|
| 1 | Fri Dec 21 00:00:00 2012 | First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/