CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CVSS Details
- CVSS 3.1 Base Score: 8.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-CPAN | Nov 16, 2023 | Apr 29, 2023 |
| Amazon Linux Ami 2 | — | Upgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perlUpgrade perl-testsUpgrade perl-coreUpgrade perl-ExtUtils-InstallUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-libsUpgrade perl-macrosUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-Time-PieceUpgrade perl-Object-Accessor | May 17, 2023 | Apr 29, 2023 |
| Amazon_linux | — | Upgrade perl | Jun 7, 2023 | Apr 29, 2023 |
| Amazon_linux_2023 | — | Upgrade perl-File-CompareUpgrade perl-macrosUpgrade perl-baseUpgrade perl-IPC-Open3Upgrade perl-Getopt-StdUpgrade perl-DirHandleUpgrade perl-ExtUtils-ConstantUpgrade perl-Sys-HostnameUpgrade perl-FcntlUpgrade perl-IO-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-BenchmarkUpgrade perl-Module-LoadedUpgrade perl-interpreter-debuginfoUpgrade perl-libnetcfgUpgrade perl-vmsishUpgrade perl-ExtUtils-EmbedUpgrade perl-meta-notationUpgrade perl-ThreadUpgrade perl-SafeUpgrade perl-SymbolUpgrade perl-debuginfoUpgrade perl-Tie-FileUpgrade perl-ifUpgrade perl-fieldsUpgrade perl-localeUpgrade perl-Hash-Util-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perlUpgrade perl-NetUpgrade perl-TieUpgrade perl-Unicode-UCDUpgrade perl-Time-PieceUpgrade perl-diagnosticsUpgrade perl-Thread-SemaphoreUpgrade perl-Term-ReadLineUpgrade perl-File-BasenameUpgrade perl-MemoizeUpgrade perl-libs-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-ErrnoUpgrade perl-overloadUpgrade perl-Pod-HtmlUpgrade perl-interpreterUpgrade perl-I18N-LangTagsUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-ODBM_FileUpgrade perl-TimeUpgrade perl-sortUpgrade perl-openUpgrade perl-FileHandleUpgrade perl-mroUpgrade perl-Term-CompleteUpgrade perl-BUpgrade perl-mro-debuginfoUpgrade perl-File-statUpgrade perl-IOUpgrade perl-filetestUpgrade perl-lessUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-subsUpgrade perl-AutoSplitUpgrade perl-debuggerUpgrade perl-Config-ExtensionsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-GDBM_FileUpgrade perl-SelfLoaderUpgrade perl-develUpgrade perl-File-DosGlobUpgrade perl-SelectSaverUpgrade perl-FindBinUpgrade perl-NEXTUpgrade perl-TestUpgrade perl-CPANUpgrade perl-autouseUpgrade perl-Search-DictUpgrade perl-POSIXUpgrade perl-Math-ComplexUpgrade perl-I18N-CollateUpgrade perl-FileCacheUpgrade perl-Fcntl-debuginfoUpgrade perl-DumpvalueUpgrade perl-DynaLoaderUpgrade perl-NDBM_FileUpgrade perl-utilsUpgrade perl-Pod-FunctionsUpgrade perl-Hash-UtilUpgrade perl-EnglishUpgrade perl-debugsourceUpgrade perl-NDBM_File-debuginfoUpgrade perl-Attribute-HandlersUpgrade perl-POSIX-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-deprecateUpgrade perl-blibUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-B-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-libUpgrade perl-CPAN-testsUpgrade perl-overloadingUpgrade perl-OpcodeUpgrade perl-ODBM_File-debuginfoUpgrade perl-encoding-warningsUpgrade perl-DBM_FilterUpgrade perl-Class-StructUpgrade perl-User-pwentUpgrade perl-docUpgrade perl-varsUpgrade perl-AutoLoaderUpgrade perl-Text-AbbrevUpgrade perl-phUpgrade perl-File-CopyUpgrade perl-sigtrapUpgrade perl-File-FindUpgrade perl-ExtUtils-MiniperlUpgrade perl-testsUpgrade perl-libs | Feb 17, 2025 | Apr 29, 2023 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Sep 1, 2025 | Sep 1, 2025 |
| Centos_linux | — | Upgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Debian | — | Upgrade perl | Oct 23, 2024 | Apr 29, 2023 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Oct 29, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade perl-libsUpgrade perl | Jul 18, 2023 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp8 | — | — | Jan 10, 2024 | Apr 29, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade perl-libsUpgrade perl | Jan 10, 2024 | Apr 29, 2023 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory7 | Oct 6, 2023 | Apr 29, 2023 |
| Oracle_linux | — | Upgrade perl-IO-ZlibUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-develUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-testsUpgrade perl-ExtUtils-InstallUpgrade perl-libsUpgrade perl-Object-AccessorUpgrade perl-macrosUpgrade perl-Time-PieceUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-LoadedUpgrade perl-coreUpgrade perlUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-Simple | May 28, 2024 | Apr 29, 2023 |
| Redhat_linux | — | Upgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-libsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perlUpgrade perl-ExtUtils-InstallUpgrade perl-develUpgrade perl-Time-PieceUpgrade perl-Module-LoadedUpgrade perl-macrosUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedNo solution existsUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-CPAN | Nov 8, 2023 | Apr 29, 2023 |
| Rocky_linux | — | — | Aug 15, 2024 | Apr 29, 2023 |
| Suse | — | Upgrade perl-core-DB_File-32bitUpgrade perl-32bitUpgrade perl-core-DB_FileUpgrade perl-docUpgrade perl-base-32bitUpgrade perlUpgrade perl-base | Jul 20, 2023 | Apr 29, 2023 |
| Ubuntu | — | Upgrade perl (Ubuntu Pro)Upgrade perl | May 30, 2023 | Apr 29, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub