The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade perl | Jul 26, 2016 | Jul 25, 2016 |
| Freebsd | — | Upgrade perl5.24Upgrade perl5.20Upgrade p5-XSLoaderUpgrade perl5-develUpgrade perlUpgrade perl5Upgrade perl5.22Upgrade perl5.18 | Dec 10, 2025 | Aug 4, 2016 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Oct 30, 2017 | Aug 2, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-develUpgrade perlUpgrade perl-coreUpgrade perl-libsUpgrade perl-macros | Sep 25, 2019 | Aug 2, 2016 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-develUpgrade perl-macrosUpgrade perl-libsUpgrade perlUpgrade perl-core | Feb 24, 2020 | Aug 2, 2016 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.3.12.0.2.0 on Solaris 11.3Upgrade runtime/perl-512 to version 5.12.5-0.175.3.11.0.4.0 on Solaris 11.3Upgrade runtime/perl-threaded-512 to version 5.12.5-0.175.3.11.0.4.0 on Solaris 11.3Upgrade runtime/perl-584/extra to version 5.8.4-0.175.3.12.0.2.0 on Solaris 11.3 | May 29, 2017 | Aug 2, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 30, 2016 |
| Suse | — | Upgrade perl-baseUpgrade perl-base-32bitUpgrade sles12-docker-imageUpgrade perl-Module-BuildUpgrade perl-Test-SimpleUpgrade perlUpgrade perl-docUpgrade perl-x86Upgrade perl-32bitUpgrade sles12sp1-docker-image | Sep 6, 2016 | Aug 2, 2016 |
| Ubuntu | — | Upgrade perl | Apr 25, 2018 | Aug 2, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub