CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.
CVSS Details
- CVSS 3.1 Base Score: 5.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade perlUpgrade perl-suidperl | Dec 1, 2016 | Dec 6, 2010 |
| Debian | — | Upgrade perlUpgrade libcgi-pm-perlUpgrade libcgi-simple-perl | Jul 30, 2024 | Dec 6, 2010 |
| Oracle_linux | — | Upgrade perl-IPC-CmdUpgrade perl-Module-CoreListUpgrade perl-develUpgrade perl-CPANUpgrade perl-IO-ZlibUpgrade perl-suidperlUpgrade perl-libsUpgrade perl-CGIUpgrade perl-IO-Compress-ZlibUpgrade perl-Compress-Raw-ZlibUpgrade perl-Module-LoadUpgrade perl-Test-HarnessUpgrade perl-Module-BuildUpgrade perl-ExtUtils-ParseXSUpgrade perl-Test-SimpleUpgrade perlUpgrade perl-Module-PluggableUpgrade perl-versionUpgrade perl-Archive-ExtractUpgrade perl-Compress-ZlibUpgrade perl-parentUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Module-Load-ConditionalUpgrade perl-Archive-TarUpgrade perl-CPANPLUSUpgrade perl-Module-LoadedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-HiResUpgrade perl-Params-CheckUpgrade perl-ExtUtils-EmbedUpgrade perl-Pod-EscapesUpgrade perl-Parse-CPAN-MetaUpgrade perl-Time-PieceUpgrade perl-Term-UIUpgrade perl-IO-Compress-BaseUpgrade perl-Package-ConstantsUpgrade perl-Digest-SHAUpgrade perl-coreUpgrade perl-File-FetchUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-Log-MessageUpgrade perl-Pod-Simple | Oct 16, 2024 | Dec 6, 2010 |
| Suse | — | Upgrade perl-x86Upgrade perlUpgrade perl-32bitUpgrade perl-docUpgrade perl-baseUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-base-32bit | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 6, 2010 |
| Vmsa 2012 0013 | — | Upgrade VMware ESX 4.1 to build number 800380 | Sep 17, 2012 | Dec 6, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub