The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl | Dec 1, 2016 | May 19, 2010 |
| Debian | — | Upgrade perl | Jul 30, 2024 | May 19, 2010 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-base.Upgrade dev-db/postgresql-server.Upgrade dev-db/postgresql. | Oct 30, 2017 | May 19, 2010 |
| Oracle_linux | — | Upgrade perl-suidperlUpgrade perl | Oct 16, 2024 | May 19, 2010 |
| Suse | — | Upgrade perl-Module-BuildUpgrade perl-baseUpgrade perl-Test-SimpleUpgrade perl-32bitUpgrade perl-x86Upgrade perl-docUpgrade perl-base-32bitUpgrade perl | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | May 19, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 4.0 to build number 294855Upgrade VMware ESX 3.5 to build number 283373 | Nov 19, 2010 | May 19, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub