6.8

CVE-2013-7284

The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Malcolm Nooning ≫ Pirpc SwPlatform perl Version <= 0.2020
Malcolm Nooning ≫ Pirpc Version 0.2000 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2001 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2002 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2003 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2010 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2011 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2012 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2013 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2014 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2016 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2017 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2018 SwPlatform perl
Malcolm Nooning ≫ Pirpc Version 0.2019 SwPlatform perl
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.84% 0.85
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-94 Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

http://seclists.org/oss-sec/2014/q1/56
http://seclists.org/oss-sec/2014/q1/62
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789
https://bugzilla.redhat.com/show_bug.cgi?id=1030572
https://bugzilla.redhat.com/show_bug.cgi?id=1051108
https://rt.cpan.org/Public/Bug/Display.html?id=90474
Patch