Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2016-1238     John Lightsey and Todd Rinaldo reported that the     opportunistic loading of optional modules can make many     programs unintentionally load code from the current     working directory (which might be changed to another     directory without the user realising) and potentially     leading to privilege escalation, as demonstrated in     Debian with certain combinations of installed packages.

  The problem relates to Perl loading modules from the includes   directory array ('@INC') in which the last element is the current   directory ('.'). That means that, when 'perl' wants to load a module   (during first compilation or during lazy loading of a module in run   time), perl will look for the module in the current directory at the   end, since '.' is the last include directory in its array of include   directories to seek. The issue is with requiring libraries that are   in '.' but are not otherwise installed.

  With this update several modules which are known to be vulnerable   are updated to not load modules from current directory.

  Additionally the update allows configurable removal of '.' from @INC   in /etc/perl/sitecustomize.pl for a transitional period. It is   recommended to enable this setting if the possible breakage for a   specific site has been evaluated. Problems in packages provided in   Debian resulting from the switch to the removal of '.' from @INC   should be reported to the Perl maintainers at   perl@packages.debian.org .

  It is planned to switch to the default removal of '.' in @INC in a   subsequent update to perl via a point release if possible, and in   any case for the upcoming stable release Debian 9 (stretch).

  - CVE-2016-6185     It was discovered that XSLoader, a core module from Perl     to dynamically load C libraries into Perl code, could     load shared library from incorrect location. XSLoader     uses caller() information to locate the .so file to     load. This can be incorrect if XSLoader::load() is     called in a string eval. An attacker can take advantage     of this flaw to execute arbitrary code.

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Integer underflow in regcomp.c in Perl before 5.20, as     used in Apple OS X before 10.10.5 and other products,     allows context-dependent attackers to execute arbitrary     code or cause a denial of service (application crash)     via a long digit string associated with an invalid     backreference within a regular     expression.(CVE-2013-7422)

  - 1) cpan/Archive-Tar/bin/ptar, (2)     cpan/Archive-Tar/bin/ptardiff, (3)     cpan/Archive-Tar/bin/ptargrep, (4)     cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6)     cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess,     (8) cpan/Encode/bin/piconv, (9)     cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump,     (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12)     cpan/IO-Compress/bin/zipdetails, (13)     cpan/JSON-PP/bin/json_pp, (14)     cpan/Test-Harness/bin/prove, (15)     dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16)     dist/Module-CoreList/corelist, (17)     ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19)     utils/h2ph.PL, (20) utils/h2xs.PL, (21)     utils/libnetcfg.PL, (22) utils/perlbug.PL, (23)     utils/perldoc.PL, (24) utils/perlivp.PL, and (25)     utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24     before 5.24.1-RC2 do not properly remove . (period)     characters from the end of the includes directory     array, which might allow local users to gain privileges     via a Trojan horse module under the current working     directory.(CVE-2016-1238)

  - The XSLoader::load method in XSLoader in Perl does not     properly locate .so files when called in a string eval,     which might allow local users to execute arbitrary code     via a Trojan horse library under the current working     directory.(CVE-2016-6185)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 6.06, has perl packages installed that are affected by multiple vulnerabilities:

  - Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers     to execute arbitrary code via a large item count. (CVE-2018-6913)

  - Directory traversal vulnerability in the Archive::Tar Perl module 1.36 and earlier allows user-assisted     remote attackers to overwrite arbitrary files via a TAR archive that contains a file whose name is an     absolute path or has .. sequences. (CVE-2007-4829)

  - The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before performing     a chmod, which allows local users to modify the permissions of arbitrary files via a symlink attack, a     different vulnerability than CVE-2005-0448 and CVE-2004-0452. (CVE-2008-2827)

  - Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash) via a     UTF-8 character with a large, invalid codepoint, which is not properly handled during a regular-expression     match. (CVE-2009-3626)

  - The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers     to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers     an uninitialized pointer dereference. (CVE-2011-2728)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
92548	Debian DSA-3628-1 : perl - security update	Nessus	Debian Local Security Checks	2016/7/26	2021/1/11	high
135638	EulerOS Virtualization 3.0.2.2 : perl (EulerOS-SA-2020-1476)	Nessus	Huawei Local Security Checks	2020/4/16	2024/3/15	high
266244	NewStart CGSL MAIN 6.06 : perl Multiple Vulnerabilities (NS-SA-2025-0211)	Nessus	NewStart CGSL Local Security Checks	2025/9/30	2025/9/30	critical

检测

插件搜索

high

high

critical