The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl | Dec 1, 2016 | Dec 6, 2010 |
| Debian | — | Upgrade libcgi-pm-perlUpgrade libcgi-simple-perlUpgrade perl | Jul 30, 2024 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade perl-Module-LoadedUpgrade perl-Digest-SHAUpgrade perl-Parse-CPAN-MetaUpgrade perl-IO-Compress-BaseUpgrade perl-Archive-TarUpgrade perl-Term-UIUpgrade perl-Package-ConstantsUpgrade perl-CPANPLUSUpgrade perl-Time-PieceUpgrade perl-parentUpgrade perl-File-FetchUpgrade perl-Pod-EscapesUpgrade perl-Log-MessageUpgrade perl-Pod-SimpleUpgrade perl-Log-Message-SimpleUpgrade perl-Module-Load-ConditionalUpgrade perl-Params-CheckUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Archive-ExtractUpgrade perl-ExtUtils-EmbedUpgrade perl-coreUpgrade perl-Compress-ZlibUpgrade perl-Time-HiResUpgrade perl-Test-SimpleUpgrade perl-IO-ZlibUpgrade perl-versionUpgrade perl-suidperlUpgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-CGIUpgrade perl-Module-BuildUpgrade perl-CPANUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-PluggableUpgrade perlUpgrade perl-IO-Compress-ZlibUpgrade perl-develUpgrade perl-Test-HarnessUpgrade perl-Compress-Raw-ZlibUpgrade perl-IPC-CmdUpgrade perl-Module-Load | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade perl-baseUpgrade perl-x86Upgrade perl-docUpgrade perl-32bitUpgrade perlUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-base-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Dec 6, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub