Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade perl | Mar 2, 2016 | Mar 1, 2016 |
| Freebsd | — | Upgrade perl5.18Upgrade perlUpgrade perl5Upgrade perl5.20Upgrade perl5.22 | Dec 10, 2025 | May 10, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Oct 30, 2017 | Apr 8, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-libsUpgrade perl-develUpgrade perlUpgrade perl-macrosUpgrade perl-core | Feb 22, 2021 | Apr 8, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-libsUpgrade perlUpgrade perl-develUpgrade perl-coreUpgrade perl-macros | Jan 20, 2021 | Apr 8, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-coreUpgrade perl-macrosUpgrade perl-libsUpgrade perlUpgrade perl-devel | Feb 3, 2021 | Apr 8, 2016 |
| Oracle Solaris | — | Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.9.0.2.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.9.0.2.0 on Solaris 11.3 | May 29, 2017 | Apr 8, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 1, 2016 |
| Suse | — | Upgrade perl-docUpgrade perlUpgrade perl-Module-BuildUpgrade perl-Test-SimpleUpgrade perl-base-32bitUpgrade sles12sp1-docker-imageUpgrade sles12-docker-imageUpgrade perl-32bitUpgrade perl-x86Upgrade perl-base | Apr 8, 2016 | Apr 8, 2016 |
| Ubuntu | — | Upgrade perl | Mar 2, 2016 | Mar 2, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub