PatchTheCVEactiveperl vulnerabilities and fixes
Recent CVEs affecting activeperl, with upgrade or downgrade steps. 6 tracked.
activeperl has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2012-10-11. Highest priority: CVE-2004-0377 (score 58/100).
- CVE-2012-5377 MEDIUM 6.0 DOWNGRADE Untrusted search path vulnerability in the installation functionality in ActivePerl 5.16.1.1601, when installe
- CVE-2006-2856 MEDIUM 4.6 DOWNGRADE ActiveState ActivePerl 5.8.8.817 for Windows configures the site/lib directory with "Users" group permissions
- CVE-2004-2286 HIGH 7.5 DOWNGRADE DOWNGRADE Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of servic
- CVE-2004-2022 LOW 2.1 DOWNGRADE ActivePerl 5.8.x and others, and Larry Wall's Perl 5.6.1 and others, when running on Windows systems, allows a
- CVE-2004-0377 HIGH 10.0 MITIGATE UPGRADE Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5
- CVE-2001-0815 HIGH 7.5 UPGRADE Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execu
FAQ
How do I fix activeperl vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is activeperl being exploited right now?
None of the tracked activeperl CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which activeperl CVE should I patch first?
CVE-2004-0377 currently ranks highest (58/100): Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.