PatchTheCVElarry wall vulnerabilities
Recent CVEs affecting larry wall products. 11 tracked.
larry wall has 11 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-11-07. Highest priority: CVE-2004-0377 (score 58/100).
- CVE-2007-5116 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 all
- CVE-2005-4278 HIGH 7.2 UPGRADE Untrusted search path vulnerability in Perl before 5.8.7-r1 on Gentoo Linux allows local users in the portage
- CVE-2005-0448 LOW 1.2 DOWNGRADE Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbit
- CVE-2005-0156 LOW 2.1 DOWNGRADE DOWNGRADE Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows
- CVE-2005-0155 MEDIUM 4.6 DOWNGRADE The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local users to cre
- CVE-2004-2286 HIGH 7.5 DOWNGRADE DOWNGRADE Integer overflow in the duplication operator in ActivePerl allows remote attackers to cause a denial of servic
- CVE-2004-0976 LOW 2.1 DOWNGRADE Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allow
- CVE-2004-0452 LOW 2.6 DOWNGRADE Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permiss
- CVE-2004-0377 HIGH 10.0 MITIGATE UPGRADE Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5
- CVE-2003-0900 MEDIUM 5.0 DOWNGRADE Perl 5.8.1 on Fedora Core does not properly initialize the random number generator when forking, which makes i
- CVE-2000-0703 HIGH 7.2 DOWNGRADE suidperl (aka sperl) does not properly cleanse the escape sequence "~!" before calling /bin/mail to send an er
FAQ
How do I fix larry wall vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is larry wall being exploited right now?
None of the tracked larry wall CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which larry wall CVE should I patch first?
CVE-2004-0377 currently ranks highest (58/100): Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.