The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl | Dec 1, 2016 | Dec 6, 2010 |
| Debian | — | Upgrade libcgi-simple-perlUpgrade libcgi-pm-perlUpgrade perl | Jul 30, 2024 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade perl-CPANUpgrade perl-libsUpgrade perlUpgrade perl-CGIUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-CoreListUpgrade perl-Module-BuildUpgrade perl-Module-PluggableUpgrade perl-develUpgrade perl-IPC-CmdUpgrade perl-IO-ZlibUpgrade perl-versionUpgrade perl-Module-LoadUpgrade perl-Compress-Raw-ZlibUpgrade perl-suidperlUpgrade perl-IO-Compress-ZlibUpgrade perl-Test-HarnessUpgrade perl-Test-SimpleUpgrade perl-Term-UIUpgrade perl-coreUpgrade perl-Parse-CPAN-MetaUpgrade perl-Digest-SHAUpgrade perl-Log-MessageUpgrade perl-Archive-ExtractUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-Archive-TarUpgrade perl-Module-LoadedUpgrade perl-CPANPLUSUpgrade perl-Time-HiResUpgrade perl-Module-Load-ConditionalUpgrade perl-Pod-EscapesUpgrade perl-Time-PieceUpgrade perl-Object-AccessorUpgrade perl-File-FetchUpgrade perl-Pod-SimpleUpgrade perl-Compress-ZlibUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MakeMakerUpgrade perl-parentUpgrade perl-Package-ConstantsUpgrade perl-IO-Compress-Base | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade perl-Module-BuildUpgrade perl-base-32bitUpgrade perl-Test-SimpleUpgrade perl-baseUpgrade perl-docUpgrade perl-x86Upgrade perlUpgrade perl-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Dec 6, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub