The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl-pathtools. | Aug 30, 2017 | Jan 13, 2016 |
| Debian | — | Upgrade perl | Feb 2, 2016 | Jan 11, 2016 |
| Freebsd | — | Upgrade perl5-develUpgrade perl5.22Upgrade perl5Upgrade perl5.20Upgrade p5-PathTools | Dec 10, 2025 | Jan 12, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Oct 30, 2017 | Jan 13, 2016 |
| Oracle Solaris | — | Upgrade library/perl-5/authen-pam-584 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-threaded-512 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-512 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser to version 5.12.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-512 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-522 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-522 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-512 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database-584 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-522 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-threaded-512 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base-522 to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-512 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-584 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-threaded-512 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-584 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-522 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-584 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-threaded-512 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk-512 to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-512 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/perl-x11-protocol-522 to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl5/perl-tk-522 to version 804.33-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-512 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh-512 to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-522 to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/perl-x11-protocol-512 to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-sax-base to version 1.8-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam to version 5.8.4-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh-522 to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools-512 to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-512 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade library/perl-5/database-522 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-simple-threaded-512 to version 2.18-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database-512 to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/perl-x11-protocol to version 0.56-0.175.3.19.0.1.0 on Solaris 11.3Upgrade terminal/cssh to version 4.2.1-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-threaded-512 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-namespacesupport-522 to version 1.11-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/database to version 1.636-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-libxml-threaded-512 to version 2.121-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/authen-pam-512 to version 0.16-0.175.3.19.0.1.0 on Solaris 11.3Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.19.0.2.0 on Solaris 11.3Upgrade library/perl-5/xml-sax to version 0.99-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/pmtools to version 1.10-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-584 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/CGI to version 4.28-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/xml-parser-522 to version 2.44-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/net-ssleay-522 to version 1.78-0.175.3.19.0.1.0 on Solaris 11.3Upgrade library/perl-5/CGI-522 to version 4.28-0.175.3.19.0.1.0 on Solaris 11.3 | May 29, 2017 | Jan 13, 2016 |
| Suse | — | Upgrade perl-32bitUpgrade perl-debuginfo-32bitUpgrade perl-base-debuginfoUpgrade perl-debuginfoUpgrade perlUpgrade perl-base-32bitUpgrade perl-debugsourceUpgrade perl-docUpgrade perl-baseUpgrade perl-base-debuginfo-32bit | Mar 28, 2016 | Jan 13, 2016 |
| Ubuntu | — | Upgrade perl | Feb 2, 2016 | Jan 13, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub