7.8

CVE-2016-1238

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version 8.0
Fedoraproject ≫ Fedora Version 23
Fedoraproject ≫ Fedora Version 24
Perl ≫ Perl Version 1.0.15
Perl ≫ Perl Version 1.0.16
Perl ≫ Perl Version 5.000
Perl ≫ Perl Version 5.000o
Perl ≫ Perl Version 5.001
Perl ≫ Perl Version 5.001n
Perl ≫ Perl Version 5.002
Perl ≫ Perl Version 5.002_01
Perl ≫ Perl Version 5.003
Perl ≫ Perl Version 5.003_01
Perl ≫ Perl Version 5.003_02
Perl ≫ Perl Version 5.003_03
Perl ≫ Perl Version 5.003_04
Perl ≫ Perl Version 5.003_05
Perl ≫ Perl Version 5.003_07
Perl ≫ Perl Version 5.003_08
Perl ≫ Perl Version 5.003_09
Perl ≫ Perl Version 5.003_10
Perl ≫ Perl Version 5.003_11
Perl ≫ Perl Version 5.003_12
Perl ≫ Perl Version 5.003_13
Perl ≫ Perl Version 5.003_14
Perl ≫ Perl Version 5.003_15
Perl ≫ Perl Version 5.003_16
Perl ≫ Perl Version 5.003_17
Perl ≫ Perl Version 5.003_18
Perl ≫ Perl Version 5.003_19
Perl ≫ Perl Version 5.003_20
Perl ≫ Perl Version 5.003_21
Perl ≫ Perl Version 5.003_22
Perl ≫ Perl Version 5.003_23
Perl ≫ Perl Version 5.003_24
Perl ≫ Perl Version 5.003_25
Perl ≫ Perl Version 5.003_26
Perl ≫ Perl Version 5.003_27
Perl ≫ Perl Version 5.003_28
Perl ≫ Perl Version 5.003_90
Perl ≫ Perl Version 5.003_91
Perl ≫ Perl Version 5.003_92
Perl ≫ Perl Version 5.003_93
Perl ≫ Perl Version 5.003_94
Perl ≫ Perl Version 5.003_95
Perl ≫ Perl Version 5.003_96
Perl ≫ Perl Version 5.003_97
Perl ≫ Perl Version 5.003_97a
Perl ≫ Perl Version 5.003_97b
Perl ≫ Perl Version 5.003_97c
Perl ≫ Perl Version 5.003_97d
Perl ≫ Perl Version 5.003_97e
Perl ≫ Perl Version 5.003_97f
Perl ≫ Perl Version 5.003_97g
Perl ≫ Perl Version 5.003_97h
Perl ≫ Perl Version 5.003_97i
Perl ≫ Perl Version 5.003_97j
Perl ≫ Perl Version 5.003_98
Perl ≫ Perl Version 5.003_99
Perl ≫ Perl Version 5.003_99a
Perl ≫ Perl Version 5.004
Perl ≫ Perl Version 5.004_01
Perl ≫ Perl Version 5.004_02
Perl ≫ Perl Version 5.004_03
Perl ≫ Perl Version 5.004_04
Perl ≫ Perl Version 5.004_05
Perl ≫ Perl Version 5.005
Perl ≫ Perl Version 5.005_01
Perl ≫ Perl Version 5.005_02
Perl ≫ Perl Version 5.005_03
Perl ≫ Perl Version 5.005_04
Perl ≫ Perl Version 5.6
Perl ≫ Perl Version 5.6.0
Perl ≫ Perl Version 5.6.1
Perl ≫ Perl Version 5.6.2
Perl ≫ Perl Version 5.7.3
Perl ≫ Perl Version 5.8
Perl ≫ Perl Version 5.8.0
Perl ≫ Perl Version 5.8.1
Perl ≫ Perl Version 5.8.2
Perl ≫ Perl Version 5.8.3
Perl ≫ Perl Version 5.8.4
Perl ≫ Perl Version 5.8.5
Perl ≫ Perl Version 5.8.6
Perl ≫ Perl Version 5.8.7
Perl ≫ Perl Version 5.8.8
Perl ≫ Perl Version 5.8.9
Perl ≫ Perl Version 5.8.9 Update rc1
Perl ≫ Perl Version 5.9.0
Perl ≫ Perl Version 5.9.1
Perl ≫ Perl Version 5.9.2
Perl ≫ Perl Version 5.9.3
Perl ≫ Perl Version 5.9.4
Perl ≫ Perl Version 5.9.5
Perl ≫ Perl Version 5.10
Perl ≫ Perl Version 5.10.0
Perl ≫ Perl Version 5.10.1
Perl ≫ Perl Version 5.10.1 Update rc1
Perl ≫ Perl Version 5.10.1 Update rc2
Perl ≫ Perl Version 5.11.0
Perl ≫ Perl Version 5.11.1
Perl ≫ Perl Version 5.11.2
Perl ≫ Perl Version 5.11.3
Perl ≫ Perl Version 5.11.4
Perl ≫ Perl Version 5.11.5
Perl ≫ Perl Version 5.12.0
Perl ≫ Perl Version 5.12.0 Update rc0
Perl ≫ Perl Version 5.12.0 Update rc1
Perl ≫ Perl Version 5.12.0 Update rc2
Perl ≫ Perl Version 5.12.0 Update rc3
Perl ≫ Perl Version 5.12.0 Update rc4
Perl ≫ Perl Version 5.12.0 Update rc5
Perl ≫ Perl Version 5.12.1
Perl ≫ Perl Version 5.12.1 Update rc0
Perl ≫ Perl Version 5.12.1 Update rc1
Perl ≫ Perl Version 5.12.1 Update rc2
Perl ≫ Perl Version 5.12.2
Perl ≫ Perl Version 5.12.2 Update rc1
Perl ≫ Perl Version 5.12.3
Perl ≫ Perl Version 5.12.3 Update rc1
Perl ≫ Perl Version 5.12.3 Update rc2
Perl ≫ Perl Version 5.12.3 Update rc3
Perl ≫ Perl Version 5.12.4
Perl ≫ Perl Version 5.12.4 Update rc1
Perl ≫ Perl Version 5.12.4 Update rc2
Perl ≫ Perl Version 5.12.5
Perl ≫ Perl Version 5.12.5 Update rc1
Perl ≫ Perl Version 5.12.5 Update rc2
Perl ≫ Perl Version 5.13.0
Perl ≫ Perl Version 5.13.1
Perl ≫ Perl Version 5.13.2
Perl ≫ Perl Version 5.13.3
Perl ≫ Perl Version 5.13.4
Perl ≫ Perl Version 5.13.5
Perl ≫ Perl Version 5.13.6
Perl ≫ Perl Version 5.13.7
Perl ≫ Perl Version 5.13.8
Perl ≫ Perl Version 5.13.9
Perl ≫ Perl Version 5.13.10
Perl ≫ Perl Version 5.13.11
Perl ≫ Perl Version 5.14.0
Perl ≫ Perl Version 5.14.0 Update rc1
Perl ≫ Perl Version 5.14.0 Update rc2
Perl ≫ Perl Version 5.14.0 Update rc3
Perl ≫ Perl Version 5.14.1
Perl ≫ Perl Version 5.14.1 Update rc1
Perl ≫ Perl Version 5.14.2
Perl ≫ Perl Version 5.14.2 Update rc1
Perl ≫ Perl Version 5.14.3
Perl ≫ Perl Version 5.14.3 Update rc1
Perl ≫ Perl Version 5.14.3 Update rc2
Perl ≫ Perl Version 5.14.4
Perl ≫ Perl Version 5.14.4 Update rc1
Perl ≫ Perl Version 5.14.4 Update rc2
Perl ≫ Perl Version 5.15.0
Perl ≫ Perl Version 5.15.1
Perl ≫ Perl Version 5.15.2
Perl ≫ Perl Version 5.15.3
Perl ≫ Perl Version 5.15.4
Perl ≫ Perl Version 5.15.5
Perl ≫ Perl Version 5.15.6
Perl ≫ Perl Version 5.15.7
Perl ≫ Perl Version 5.15.8
Perl ≫ Perl Version 5.15.9
Perl ≫ Perl Version 5.16.0
Perl ≫ Perl Version 5.16.0 Update rc1
Perl ≫ Perl Version 5.16.0 Update rc2
Perl ≫ Perl Version 5.16.1
Perl ≫ Perl Version 5.16.2
Perl ≫ Perl Version 5.16.3
Perl ≫ Perl Version 5.16.3 Update rc1
Perl ≫ Perl Version 5.17.0
Perl ≫ Perl Version 5.17.1
Perl ≫ Perl Version 5.17.2
Perl ≫ Perl Version 5.17.3
Perl ≫ Perl Version 5.17.4
Perl ≫ Perl Version 5.17.5
Perl ≫ Perl Version 5.17.6
Perl ≫ Perl Version 5.17.7
Perl ≫ Perl Version 5.17.7.0
Perl ≫ Perl Version 5.17.8
Perl ≫ Perl Version 5.17.9
Perl ≫ Perl Version 5.17.10
Perl ≫ Perl Version 5.17.11
Perl ≫ Perl Version 5.18.0
Perl ≫ Perl Version 5.18.0 Update rc1
Perl ≫ Perl Version 5.18.0 Update rc2
Perl ≫ Perl Version 5.18.0 Update rc3
Perl ≫ Perl Version 5.18.0 Update rc4
Perl ≫ Perl Version 5.18.1
Perl ≫ Perl Version 5.18.2
Perl ≫ Perl Version 5.18.2 Update rc1
Perl ≫ Perl Version 5.18.2 Update rc2
Perl ≫ Perl Version 5.18.2 Update rc3
Perl ≫ Perl Version 5.18.2 Update rc4
Perl ≫ Perl Version 5.18.3
Perl ≫ Perl Version 5.18.3 Update rc1
Perl ≫ Perl Version 5.18.3 Update rc2
Perl ≫ Perl Version 5.18.4
Perl ≫ Perl Version 5.19.0
Perl ≫ Perl Version 5.19.1
Perl ≫ Perl Version 5.19.2
Perl ≫ Perl Version 5.19.3
Perl ≫ Perl Version 5.19.4
Perl ≫ Perl Version 5.19.5
Perl ≫ Perl Version 5.19.6
Perl ≫ Perl Version 5.19.7
Perl ≫ Perl Version 5.19.8
Perl ≫ Perl Version 5.19.9
Perl ≫ Perl Version 5.19.10
Perl ≫ Perl Version 5.19.11
Perl ≫ Perl Version 5.20.0
Perl ≫ Perl Version 5.20.0 Update rc1
Perl ≫ Perl Version 5.20.1
Perl ≫ Perl Version 5.20.1 Update rc1
Perl ≫ Perl Version 5.20.1 Update rc2
Perl ≫ Perl Version 5.20.2
Perl ≫ Perl Version 5.20.2 Update rc1
Perl ≫ Perl Version 5.20.3
Perl ≫ Perl Version 5.20.3 Update rc1
Perl ≫ Perl Version 5.20.3 Update rc2
Perl ≫ Perl Version 5.21.0
Perl ≫ Perl Version 5.21.1
Perl ≫ Perl Version 5.21.2
Perl ≫ Perl Version 5.21.3
Perl ≫ Perl Version 5.21.4
Perl ≫ Perl Version 5.21.5
Perl ≫ Perl Version 5.21.6
Perl ≫ Perl Version 5.21.7
Perl ≫ Perl Version 5.21.8
Perl ≫ Perl Version 5.21.9
Perl ≫ Perl Version 5.21.10
Perl ≫ Perl Version 5.21.11
Perl ≫ Perl Version 5.22.0
Perl ≫ Perl Version 5.22.0 Update rc1
Perl ≫ Perl Version 5.22.0 Update rc2
Perl ≫ Perl Version 5.22.1
Perl ≫ Perl Version 5.22.1 Update rc1
Perl ≫ Perl Version 5.22.1 Update rc2
Perl ≫ Perl Version 5.22.1 Update rc3
Perl ≫ Perl Version 5.22.1 Update rc4
Perl ≫ Perl Version 5.22.2
Perl ≫ Perl Version 5.22.2 Update rc1
Perl ≫ Perl Version 5.22.3 Update rc1
Perl ≫ Perl Version 5.24.0
Perl ≫ Perl Version 5.24.0 Update rc1
Perl ≫ Perl Version 5.24.0 Update rc2
Perl ≫ Perl Version 5.24.0 Update rc3
Perl ≫ Perl Version 5.24.0 Update rc4
Perl ≫ Perl Version 5.24.0 Update rc5
Perl ≫ Perl Version 5.24.1 Update rc1
Opensuse ≫ Leap Version 15.0
Apache ≫ Spamassassin Version < 3.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.78% 0.511
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731
Third Party Advisory
https://security.gentoo.org/glsa/201701-75
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00002.html
Third Party Advisory
http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab
Issue Tracking
http://www.debian.org/security/2016/dsa-3628
Third Party Advisory
http://www.nntp.perl.org/group/perl.perl5.porters/2016/07/msg238271.html
Third Party Advisory
http://www.securityfocus.com/bid/92136
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036440
Third Party Advisory
VDB Entry
https://lists.apache.org/thread.html/7f6a16bc0fd0fd5e67c7fd95bd655069a2ac7d1f88e42d3c853e601c%40%3Cannounce.apache.org%3E
https://lists.debian.org/debian-lts-announce/2018/11/msg00016.html
Third Party Advisory
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2FBQOCV3GBAN2EYZUM3CFDJ4ECA3GZOK/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DOFRQWJRP2NQJEYEWOMECVW3HAMD5SYN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TZBNQH3DMI7HDELJAZ4TFJJANHXOEDWH/
https://rt.perl.org/Public/Bug/Display.html?id=127834
Permissions Required
https://security.gentoo.org/glsa/201812-07
Third Party Advisory