The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl | Dec 1, 2016 | May 19, 2010 |
| Debian | — | Upgrade perl | Jul 30, 2024 | May 19, 2010 |
| Gentoo Linux | — | Upgrade dev-db/postgresql-server.Upgrade dev-db/postgresql-base.Upgrade dev-db/postgresql. | Oct 30, 2017 | May 19, 2010 |
| Oracle_linux | — | Upgrade perl-suidperlUpgrade perl | Oct 16, 2024 | May 19, 2010 |
| Suse | — | Upgrade perl-baseUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-32bitUpgrade perl-base-32bitUpgrade perl-docUpgrade perl-x86Upgrade perl | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | May 19, 2010 |
| Vmsa 2010 0013 | — | Upgrade VMware ESX 3.5 to build number 283373Upgrade VMware ESX 4.0 to build number 294855 | Nov 19, 2010 | May 19, 2010 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub