The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade perl | Jul 30, 2024 | Dec 21, 2012 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Dec 21, 2012 |
| Oracle Solaris | — | Upgrade runtime/perl-584/extra to version 5.8.4-0.175.0.3.0.4.1 on Solaris 11.0Upgrade runtime/perl-584 to version 5.8.4-0.175.0.3.0.4.1 on Solaris 11.0 | May 29, 2017 | Dec 21, 2012 |
| Suse | — | Upgrade perl-base-32bitUpgrade perlUpgrade perl-x86Upgrade perl-baseUpgrade perl-docUpgrade perl-Module-BuildUpgrade perl-32bitUpgrade perl-Test-Simple | Feb 17, 2015 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub