{"resultsPerPage":10,"startIndex":0,"totalResults":10,"format":"NVD_CVE","version":"2.0","timestamp":"2026-11-11T06:40:57.339","vulnerabilities":[{"cve":{"id":"CVE-2009-0663","sourceIdentifier":"cve@mitre.org","published":"2009-04-30T20:30:00.187","lastModified":"2026-06-16T23:05:31.540","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Heap-based buffer overflow in the DBD::Pg (aka DBD-Pg or libdbd-pg-perl) module 1.49 for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows."},{"lang":"es","value":"Desbordamiento de búfer basado en pila en el módulo DBD::Pg (alias DBD-Pg o libdbd-pg-perl) v1.49 para Perl podría permitir a atacantes, dependiendo del contexto, ejecutar código arbitrario a través de una entrada sin especificar a una aplicación que utiliza las funciones getline y pg_getline para leer filas de la base de datos."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cmu:dbd\\:\\:pg:1.49:*:*:*:*:*:*:*","matchCriteriaId":"0B17A3CD-3BF4-41AE-B755-6C5FA6401DEE"}]}]}],"references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/34909","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35058","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/35685","source":"cve@mitre.org"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"cve@mitre.org","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"cve@mitre.org"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/34755","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50467","source":"cve@mitre.org"},{"url":"https://launchpad.net/bugs/cve/2009-0663","source":"cve@mitre.org"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499","source":"cve@mitre.org"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/34909","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35058","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/35685","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.debian.org/pool/updates/main/libd/libdbd-pg-perl/libdbd-pg-perl_1.49-2+etch1.diff.gz","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.debian.org/security/2009/dsa-1780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-0479.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2009-1067.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/34755","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/50467","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://launchpad.net/bugs/cve/2009-0663","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9499","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2009-1884","sourceIdentifier":"secalert@redhat.com","published":"2009-08-19T17:30:00.953","lastModified":"2026-06-16T23:08:16.697","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391."},{"lang":"es","value":"Error de superación de límite (Off-by-one) en la función bzinflate en Bzip2.xs en el módulo Compress-Raw-Bzip2 anterior a v2.018 para Perl permite a atacantes dependientes de contexto producir una denegación de servicio (cuelgue de aplicación o caída) a través de un stream comprimido de bzip2 que inicia un desbordamiento de búfer, una situación parecida a CVE-2009-1391."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:N/A:P","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-189"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:*:*:*:*:*:*:*:*","versionEndIncluding":"2.017","matchCriteriaId":"6C58C65A-621E-4EF4-ACD2-2B26ED08EA48"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_10:*:*:*:*:*:*:*","matchCriteriaId":"60FA80AE-D536-4323-9628-514C262DA129"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_12:*:*:*:*:*:*:*","matchCriteriaId":"B324E22C-0273-42C5-BF76-4C54AF6578A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.00_14:*:*:*:*:*:*:*","matchCriteriaId":"CD46A223-9CB9-48A4-B52D-8621B87AAAA2"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.01:*:*:*:*:*:*:*","matchCriteriaId":"B51D3C0F-0537-4240-841B-70B21DBD4C03"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.02:*:*:*:*:*:*:*","matchCriteriaId":"3D5A547D-5E85-4257-A71D-63078C5FF30A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.03:*:*:*:*:*:*:*","matchCriteriaId":"86CB8226-B0EC-4CB9-9678-6B127679A31A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.05:*:*:*:*:*:*:*","matchCriteriaId":"2F2C6E05-1CD8-4450-A101-3C2270A64B9E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.06:*:*:*:*:*:*:*","matchCriteriaId":"D38E1A94-AA44-48AE-84A4-5C64451DFE96"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.08:*:*:*:*:*:*:*","matchCriteriaId":"79442C31-96B2-4CEA-9AEB-DB7F332E938C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.0.09:*:*:*:*:*:*:*","matchCriteriaId":"802DF28F-724C-49E8-920E-E6CBA8E296DF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.010:*:*:*:*:*:*:*","matchCriteriaId":"C5C1D31B-123E-4294-81B6-46E4241C16DB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.011:*:*:*:*:*:*:*","matchCriteriaId":"A3F7EC80-16B6-4754-A8BE-28782D2FDC86"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.012:*:*:*:*:*:*:*","matchCriteriaId":"9FA78C9F-1925-4435-BFBD-129836C12238"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.014:*:*:*:*:*:*:*","matchCriteriaId":"8E299424-8560-4DCF-BDC1-8F88F0E7E8DA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bzip:compress-raw-bzip2:2.015:*:*:*:*:*:*:*","matchCriteriaId":"3026DDC6-DDCF-4244-A657-B45FAA6E4942"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}],"references":[{"url":"http://secunia.com/advisories/36386","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36415","source":"secalert@redhat.com"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/36082","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=281955","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518278","source":"secalert@redhat.com"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52628","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html","source":"secalert@redhat.com"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/36386","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/36415","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://security.gentoo.org/glsa/glsa-200908-07.xml","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/36082","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://bugs.gentoo.org/show_bug.cgi?id=281955","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=518278","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52628","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00982.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.redhat.com/archives/fedora-package-announce/2009-August/msg00999.html","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2010-1168","sourceIdentifier":"secalert@redhat.com","published":"2010-06-21T16:30:01.133","lastModified":"2026-06-16T23:17:38.920","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to \"automagic methods.\""},{"lang":"es","value":"El módulo Safe (Safe.pm) en versiones anteriores a la v2.25 de Perl permite a atacantes, dependiendo del contexto, evitar las restricciones de acceso previstas (1) Safe::reval y (2) Safe::rdo, e inyectar y ejecutar código de su elección, a través de vectores de ataque que involucran métodos llamados implícitamente y objetos implícitamente \"blessed\", como se ha demostrado por los métodos (a) DESTROY y (b) AUTOLOAD. Relacionado con los \"automagic methods\"."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.08:*:*:*:*:*:*:*","matchCriteriaId":"7746745C-8CD2-4D73-BC6E-F1DAF00B7E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.09:*:*:*:*:*:*:*","matchCriteriaId":"4C790645-E23C-4F3B-951D-6BEC15D5B47A"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.11:*:*:*:*:*:*:*","matchCriteriaId":"864B8E5A-497B-4C89-ABC4-2D0ECEE854D7"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.13:*:*:*:*:*:*:*","matchCriteriaId":"D494C134-889D-4C56-A518-2EF02EBB1411"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.14:*:*:*:*:*:*:*","matchCriteriaId":"F2C2720A-DF3D-4162-ACB5-66A3D09D5A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.15:*:*:*:*:*:*:*","matchCriteriaId":"9DFFCE6E-E9BA-4913-9913-5A3623580871"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.16:*:*:*:*:*:*:*","matchCriteriaId":"E3A174CC-76C2-4228-A940-5E5C0F9536C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.17:*:*:*:*:*:*:*","matchCriteriaId":"F5B051FD-5421-4A12-80DB-AA257A4C0552"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.18:*:*:*:*:*:*:*","matchCriteriaId":"B9EAA44E-54E7-432A-85EF-BAEE98FA4705"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.19:*:*:*:*:*:*:*","matchCriteriaId":"BA9D8473-B0F3-49D8-BB4B-80868B815D0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.20:*:*:*:*:*:*:*","matchCriteriaId":"EE3853FB-92DE-4FF5-AE31-451E0FF69358"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.21:*:*:*:*:*:*:*","matchCriteriaId":"CEB616A7-9CDA-4C19-B9B9-21EE88D0B50F"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.22:*:*:*:*:*:*:*","matchCriteriaId":"CE932500-4916-40DD-832E-47A6DD052F03"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.23:*:*:*:*:*:*:*","matchCriteriaId":"AF506158-4F67-4086-9A41-E6C43D922D44"},{"vulnerable":true,"criteria":"cpe:2.3:a:rafael_garcia-suarez:safe:2.24:*:*:*:*:*:*:*","matchCriteriaId":"99A89508-2CB2-4373-9450-FCAF04A64A5F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}],"references":[{"url":"http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html","source":"secalert@redhat.com"},{"url":"http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in","source":"secalert@redhat.com"},{"url":"http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"secalert@redhat.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/40049","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40052","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42402","source":"secalert@redhat.com"},{"url":"http://securitytracker.com/id?1024062","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:115","source":"secalert@redhat.com"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"secalert@redhat.com"},{"url":"http://www.openwall.com/lists/oss-security/2010/05/20/5","source":"secalert@redhat.com"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0457.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3075","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=576508","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424","source":"secalert@redhat.com"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807","source":"secalert@redhat.com"},{"url":"http://blogs.perl.org/users/rafael_garcia-suarez/2010/03/new-safepm-fixes-security-hole.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://blogs.sun.com/security/entry/cve_2010_1168_vulnerability_in","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://cpansearch.perl.org/src/RGARCIA/Safe-2.27/Changes","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/40049","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/40052","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/42402","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securitytracker.com/id?1024062","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:115","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:116","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.openwall.com/lists/oss-security/2010/05/20/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0457.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0458.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/3075","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=576508","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7424","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9807","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2011-2201","sourceIdentifier":"secalert@redhat.com","published":"2011-09-14T16:05:23.527","lastModified":"2026-06-16T23:30:54.817","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input."},{"lang":"es","value":"El módulo Data::FormValidator v4.66 y anteriores para Perl, cuando untaint_all_constraints está activada, no conserva correctamente el atributo taint de los datos, lo que podría permitir a atacantes remotos evitar el mecanismo de protección ante corrupción de datos a través de un formulario de entrada."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-264"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.66","matchCriteriaId":"BFABCFBC-0EC9-4DF4-B36E-C657272183A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.3:*:*:*:*:*:*:*","matchCriteriaId":"672D4776-8D5B-4819-8BF3-AEDF26C3D96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE0F8CE2-8032-4B42-954A-A2FE17756FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1F5875-286A-400B-BD54-C126DBF9208D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AE171E-7047-4028-8111-FBF69A2CA8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.6:*:*:*:*:*:*:*","matchCriteriaId":"487D174E-2DE8-43BD-B775-2821D4664FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.7:*:*:*:*:*:*:*","matchCriteriaId":"564A8717-1CCE-4210-B371-610B3CF77864"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.8:*:*:*:*:*:*:*","matchCriteriaId":"F1260F48-15C0-4BB3-B7BF-FAE2FBD48730"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AE318DEF-513B-4B8D-A234-BE163F999615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.10:*:*:*:*:*:*:*","matchCriteriaId":"89D205BE-D742-4835-BA7B-858A1CE1E573"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.11:*:*:*:*:*:*:*","matchCriteriaId":"E52CDBF8-F834-4F34-8D4A-05BDF9F0D72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.91:*:*:*:*:*:*:*","matchCriteriaId":"2137D5D4-8007-454F-A212-1766B7F439F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.92:*:*:*:*:*:*:*","matchCriteriaId":"76788109-9544-4257-8371-07370FB6D8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.93:*:*:*:*:*:*:*","matchCriteriaId":"405BB5BA-4723-4847-8748-61A69E7F53CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.00:*:*:*:*:*:*:*","matchCriteriaId":"131D4215-C4DC-4780-AA5B-06C1FEE61BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.01:*:*:*:*:*:*:*","matchCriteriaId":"4AEF3AE5-D0A4-4C68-89DB-696CBB716434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.02:*:*:*:*:*:*:*","matchCriteriaId":"0F844F48-EC40-422A-8088-BFC1647D6A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.03:*:*:*:*:*:*:*","matchCriteriaId":"E4034AF6-877B-477D-9C89-9AF4F5A3B08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.04:*:*:*:*:*:*:*","matchCriteriaId":"18F27023-9062-49BA-A8FC-52DFB1A56E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.10:*:*:*:*:*:*:*","matchCriteriaId":"1A409D95-DFA5-4A59-BC40-F593E280E007"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_01:*:*:*:*:*:*:*","matchCriteriaId":"76DCC3E8-9419-4359-ACA9-88B45881BC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_02:*:*:*:*:*:*:*","matchCriteriaId":"225F296B-AA04-426D-85EE-07CF3173F8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_03:*:*:*:*:*:*:*","matchCriteriaId":"D2B45194-6487-42A7-AF51-F065E60DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_04:*:*:*:*:*:*:*","matchCriteriaId":"A4485908-3E21-4223-8349-3FBAD619A217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.00:*:*:*:*:*:*:*","matchCriteriaId":"8998E587-98CA-4D3B-8388-45F181DAE970"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.01:*:*:*:*:*:*:*","matchCriteriaId":"E98A159C-36EF-4764-849E-C548639BF888"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.10:*:*:*:*:*:*:*","matchCriteriaId":"DCD58054-2DCB-4CAD-8C4E-22D994E59A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.11:*:*:*:*:*:*:*","matchCriteriaId":"E44C0AD3-ACB5-41AD-BFF3-C3423C7438E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.12:*:*:*:*:*:*:*","matchCriteriaId":"18E52F34-8A1B-452B-966E-CD553580028B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.13:*:*:*:*:*:*:*","matchCriteriaId":"9CC2BD62-0445-415D-B8BB-37EB70F4358D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.14:*:*:*:*:*:*:*","matchCriteriaId":"50A22B36-721E-4D4F-B37C-52927170029A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.15:*:*:*:*:*:*:*","matchCriteriaId":"1C6C294C-90E6-4150-8976-508693BD3DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.49_1:*:*:*:*:*:*:*","matchCriteriaId":"D60A3C8F-E980-451B-BDF5-5D9A712BC3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.50:*:*:*:*:*:*:*","matchCriteriaId":"0D4C0776-F778-47AF-9099-D7567AA72C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.51:*:*:*:*:*:*:*","matchCriteriaId":"93A9749E-644A-4863-82C9-766AD7CA288D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.52:*:*:*:*:*:*:*","matchCriteriaId":"727FEE1D-23F9-4451-8072-34DDCBCAAE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.53:*:*:*:*:*:*:*","matchCriteriaId":"AA70B179-D7EE-472B-882D-474BBBE23699"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.54:*:*:*:*:*:*:*","matchCriteriaId":"51CD2258-08DF-4383-9B0F-6BB15CD5A5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.55:*:*:*:*:*:*:*","matchCriteriaId":"C4C966AF-A159-4B5B-B0D8-6AD08B8929C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.56:*:*:*:*:*:*:*","matchCriteriaId":"B3AEBE47-23B4-47A4-8E99-0008400AAF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.57:*:*:*:*:*:*:*","matchCriteriaId":"1870B0DC-6BD0-4EFC-8716-772730845ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.58:*:*:*:*:*:*:*","matchCriteriaId":"8D302C63-E567-4552-9850-9EDEF4C9956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.59:*:*:*:*:*:*:*","matchCriteriaId":"CE55ACEB-ECC0-4F9E-BAEF-3F8F1B4FFC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.60:*:*:*:*:*:*:*","matchCriteriaId":"4346B371-A067-45C5-A996-F8E9F6A64335"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.61:*:*:*:*:*:*:*","matchCriteriaId":"FC0B54BA-7C06-40BC-AF06-1FA8DD55EB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.62:*:*:*:*:*:*:*","matchCriteriaId":"E4B664DE-93D4-4884-9DF4-5EBA1E9FDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.63:*:*:*:*:*:*:*","matchCriteriaId":"E48EBC0D-2B32-4478-A453-437B4708C3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.00:*:*:*:*:*:*:*","matchCriteriaId":"EAA8D79F-7FD4-49ED-B862-4C5F9F69E189"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B47A1DEE-DB01-4525-AB1F-0ECB9418FE45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.02:*:*:*:*:*:*:*","matchCriteriaId":"E055B23E-E478-4CE9-961C-36FAB8A2D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.10:*:*:*:*:*:*:*","matchCriteriaId":"F4C0DB0A-A0C1-47D4-A480-8CD0DA799751"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.11:*:*:*:*:*:*:*","matchCriteriaId":"51229D5C-47E6-4DE6-8980-C9D463FBD767"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.12:*:*:*:*:*:*:*","matchCriteriaId":"519DC991-4D87-4BF1-84ED-DE2C0B541989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.13:*:*:*:*:*:*:*","matchCriteriaId":"BD26998A-A9A2-4A19-96A4-A63F8565090C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.14:*:*:*:*:*:*:*","matchCriteriaId":"6487F14B-3779-4612-8582-7E8875425BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.20:*:*:*:*:*:*:*","matchCriteriaId":"7BC665D0-7F02-4A50-AAB6-6D5AB6CE32A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.30:*:*:*:*:*:*:*","matchCriteriaId":"D91D8001-0F08-4BF6-9140-F39A94F614F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.40:*:*:*:*:*:*:*","matchCriteriaId":"6D3E7868-5992-491F-A17F-D60A60943912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.49_01:*:*:*:*:*:*:*","matchCriteriaId":"02FA1232-DBE9-4F7F-A1E4-89E0E2A66F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.50:*:*:*:*:*:*:*","matchCriteriaId":"450FCFE6-BDDD-4654-A730-798B298E6DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"95D6EAC7-1215-426D-BBAB-0CDFB2D9D462"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.52:*:*:*:*:*:*:*","matchCriteriaId":"D42D9B8C-5FE3-4987-90D2-13252EF9ADE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.53:*:*:*:*:*:*:*","matchCriteriaId":"C9C4526E-EEDE-4A91-B1AD-8F8B70047045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.54:*:*:*:*:*:*:*","matchCriteriaId":"6DAB3AC5-3629-4A7C-9B97-E463EC58363A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.55:*:*:*:*:*:*:*","matchCriteriaId":"16B7B04C-7CF5-4C34-BFBA-57850A70C97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.56:*:*:*:*:*:*:*","matchCriteriaId":"140D6FB5-6EBF-476D-BA63-D75283786EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.57:*:*:*:*:*:*:*","matchCriteriaId":"6EEC6A01-0480-413F-8DE4-CDDF5586C277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.60:*:*:*:*:*:*:*","matchCriteriaId":"E7F5E661-8B88-42D0-8C50-9F7673C5D0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"698232CE-1461-43A3-9B4E-47698B5F81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.62:*:*:*:*:*:*:*","matchCriteriaId":"08EF5774-2E9C-42E8-8621-8619D6B9A195"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.63:*:*:*:*:*:*:*","matchCriteriaId":"D12DA159-B0E2-47BA-A75D-E06FB6ED288E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.65:*:*:*:*:*:*:*","matchCriteriaId":"DBE69C8F-F659-43AE-8A7A-D3D02B2D2FE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}],"references":[{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/12/3","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/13","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/5","source":"secalert@redhat.com"},{"url":"http://www.securityfocus.com/bid/48167","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712694","source":"secalert@redhat.com","tags":["Exploit","Patch"]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=61792","source":"secalert@redhat.com","tags":["Exploit"]},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/12/3","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/13","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/5","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/48167","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712694","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=61792","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2011-3599","sourceIdentifier":"secalert@redhat.com","published":"2011-10-10T10:55:06.863","lastModified":"2026-06-16T23:33:34.220","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The Crypt::DSA (aka Crypt-DSA) module 1.17 and earlier for Perl, when /dev/random is absent, uses the Data::Random module, which makes it easier for remote attackers to spoof a signature, or determine the signing key of a signed message, via a brute-force attack."},{"lang":"es","value":"El módulo Crypt::DSA (también conocido como Crypt-DSA) v1.17 y anterior para Perl, cuando /dev/random está ausente, usa el módulo Data::Random, lo que hace más fácil para atacantes remotos falsificar la firma, o determinar una clave de firma en un mensaje firmado, a través de un ataque de fuerza bruta."}],"affected":[{"source":"secalert@redhat.com","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:N","baseScore":5.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":4.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-310"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:*:*:*:*:*:*:*:*","versionEndIncluding":"1.17","matchCriteriaId":"A6291000-01BD-4677-A83E-5AD03CA19ED8"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.01:*:*:*:*:*:*:*","matchCriteriaId":"380B4E21-01EE-4AA7-8C3C-8FF9109AC13E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.02:*:*:*:*:*:*:*","matchCriteriaId":"64C17BCB-BEFB-463B-9E19-E534739B6143"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.03:*:*:*:*:*:*:*","matchCriteriaId":"C26BED95-412E-479F-8876-DEB487954F3E"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.10:*:*:*:*:*:*:*","matchCriteriaId":"C0B8FD92-1C81-4115-82AA-07340ED8788F"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.11:*:*:*:*:*:*:*","matchCriteriaId":"0FC2BBA6-1432-42A0-B8B3-6D79C2881543"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.12:*:*:*:*:*:*:*","matchCriteriaId":"5A7EE54C-6B92-48AC-A512-DF3F410034F6"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.13:*:*:*:*:*:*:*","matchCriteriaId":"D6EE4E97-1BCC-482C-9977-DC57B7E19A59"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.14:*:*:*:*:*:*:*","matchCriteriaId":"4D590C83-D144-413B-811C-11E9D19BC0AE"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:0.15_01:*:*:*:*:*:*:*","matchCriteriaId":"C14C8C9F-BF85-4921-B017-2E3E63AC1FD1"},{"vulnerable":true,"criteria":"cpe:2.3:a:adam_kennedy:crypt-dsa:1.16:*:*:*:*:*:*:*","matchCriteriaId":"066E1B1A-589B-47E2-AD79-BD24FEF94DBD"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}],"references":[{"url":"http://osvdb.org/76025","source":"secalert@redhat.com"},{"url":"http://secunia.com/advisories/46275","source":"secalert@redhat.com","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/05/5","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/05/9","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/49928","source":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743567","source":"secalert@redhat.com","tags":["Patch"]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=71421","source":"secalert@redhat.com","tags":["Patch"]},{"url":"http://osvdb.org/76025","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/46275","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/05/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2011/10/05/9","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"http://www.securityfocus.com/bid/49928","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743567","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=71421","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]}]}},{"cve":{"id":"CVE-2016-1246","sourceIdentifier":"security@debian.org","published":"2016-10-05T16:59:00.243","lastModified":"2026-06-17T00:41:32.857","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message."},{"lang":"es","value":"Desbordamiento de búfer en el módulo DBD::mysql en versiones anteriores a 4.037 para Perl permite a atacantes dependientes del contexto provocar una denegación de servicio (caída) a través de vectores relacionados con un mensaje de error."}],"affected":[{"source":"security@debian.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:P","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-119"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:dbd-mysql_project:dbd-mysql:*:*:*:*:*:*:*:*","versionEndIncluding":"4.036","matchCriteriaId":"0475EE55-6499-48C9-9B0C-0E0A37C0E677"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*","matchCriteriaId":"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43"}]}]}],"references":[{"url":"http://blogs.perl.org/users/mike_b/2016/10/security-release---buffer-overflow-in-dbdmysql-perl-library.html","source":"security@debian.org","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3684","source":"security@debian.org","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93337","source":"security@debian.org","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b0e85dfdefd2","source":"security@debian.org","tags":["Issue Tracking","Patch"]},{"url":"https://security.gentoo.org/glsa/201701-51","source":"security@debian.org","tags":["Patch","Third Party Advisory","VDB Entry"]},{"url":"http://blogs.perl.org/users/mike_b/2016/10/security-release---buffer-overflow-in-dbdmysql-perl-library.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","Vendor Advisory"]},{"url":"http://www.debian.org/security/2016/dsa-3684","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/93337","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://github.com/perl5-dbi/DBD-mysql/commit/7c164a0c86cec6ee95df1d141e67b0e85dfdefd2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Patch"]},{"url":"https://security.gentoo.org/glsa/201701-51","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory","VDB Entry"]}]}},{"cve":{"id":"CVE-2026-4176","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-03-29T21:16:15.717","lastModified":"2026-06-17T10:56:07.190","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.\n\nCompress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94."},{"lang":"es","value":"Las versiones de Perl desde la 5.9.4 anteriores a la 5.40.4-RC1, desde la 5.41.0 anteriores a la 5.42.2-RC1, y desde la 5.43.0 anteriores a la 5.43.9 contienen una versión vulnerable de Compress::Raw::Zlib.\n\nCompress::Raw::Zlib está incluido en el paquete de Perl como un módulo central de doble vida, y es vulnerable a CVE-2026-3381 debido a una versión empaquetada de zlib que tiene varias vulnerabilidades, incluyendo CVE-2026-27171. El Compress::Raw::Zlib empaquetado fue actualizado a la versión 2.221 en el commit de Perl blead c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"vendor":"SHAY","product":"perl","defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"perl","repo":"https://github.com/Perl/perl5","versions":[{"version":"5.9.4","lessThan":"5.40.4-RC1","versionType":"custom","status":"affected"},{"version":"5.41.0","lessThan":"5.42.2-RC1","versionType":"custom","status":"affected"},{"version":"5.43.0","lessThan":"5.43.9","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-30T15:34:29.395269Z","id":"CVE-2026-4176","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.9.4","versionEndExcluding":"5.40.4","matchCriteriaId":"CB7DC630-9F3F-404F-9759-882BFCC79961"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.41.0","versionEndExcluding":"5.42.2","matchCriteriaId":"19F3A1E9-F479-4537-AA41-6800D49A3A68"},{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionStartIncluding":"5.43.0","versionEndExcluding":"5.43.9","matchCriteriaId":"A21CB5D2-7B78-485A-A6E8-5C2BBAE99334"}]}]}],"references":[{"url":"https://github.com/Perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"]},{"url":"https://lists.security.metacpan.org/cve-announce/msg/37638919/","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Third Party Advisory"]},{"url":"https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"]},{"url":"https://metacpan.org/release/SHAY/perl-5.40.4/changes","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"]},{"url":"https://metacpan.org/release/SHAY/perl-5.42.2/changes","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-3381","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2026/03/30/2","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]}]}},{"cve":{"id":"CVE-2026-8376","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-05-26T00:16:57.150","lastModified":"2026-11-10T13:19:41.447","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds.\n\nPerl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer.\n\nA caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time."},{"lang":"es","value":"Versiones de Perl hasta la 5.43.10 tienen un desbordamiento de búfer de montón al compilar expresiones regulares con una cadena fija repetida en compilaciones de 32 bits.\n\nPerl_study_chunk en regcomp_study.c verificó el tamaño del búfer de subcadena unida en caracteres en lugar de bytes. Para una subcadena fija cuantificada con un recuento mínimo grande, la longitud en bytes mincount * l podría desbordar SSize_t, produciendo una asignación SvGROW de tamaño insuficiente; la copia subsiguiente escribe más allá del final del búfer.\n\nUn llamador que compila una expresión regular controlada por el atacante en una compilación de Perl de 32 bits desencadena un desbordamiento de búfer de montón en tiempo de compilación."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"perl","modules":["perl"],"programFiles":["regcomp_study.c"],"programRoutines":[{"name":"Perl_study_chunk"}],"repo":"https://github.com/Perl/perl5","packageURL":"pkg:cpan/perl","versions":[{"version":"0","lessThan":"5.40.5-RC1","versionType":"custom","status":"affected"},{"version":"5.41.0","lessThan":"5.42.3-RC1","versionType":"custom","status":"affected"},{"version":"5.43.0","lessThan":"5.43.11","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","baseScore":7.3,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":3.4}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-05-27T18:03:45.554441Z","id":"CVE-2026-8376","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary","description":[{"lang":"en","value":"CWE-680"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.43.10","matchCriteriaId":"8122F8D4-DD5A-4167-AB6A-BA1323CC4349"}]}]}],"references":[{"url":"https://github.com/Perl/perl5/commit/5e7f119eb2bb1181be908701f22bf7068e722f1c.patch","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2026/05/26/1","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-13221","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-07-13T17:16:48.923","lastModified":"2026-11-10T13:18:25.890","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.\n\nWhen such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.\n\nA pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong."},{"lang":"es","value":"Las versiones de Perl hasta la 5.43.9 producen silenciosamente coincidencias incorrectas de expresiones regulares cuando una alternancia de más de 65535 ramas de cadena fija se compila en un trie en Perl_study_chunk.\n\nCuando dichas ramas se combinan en un trie, el delta entre la primera rama y la cola compartida se almacena en un campo de 16 bits. Un recuento de ramas superior a 65535 desborda el campo, y la tabla de decisión de coincidencias del trie se trunca sin advertencia ni error.\n\nUn patrón de esta forma produce coincidencias de falsos positivos (coincidiendo con cadenas que no debería) y coincidencias de falsos negativos (fallando en coincidir con cadenas que sí debería). Cuando dicho patrón condiciona una decisión de acceso o filtrado, el resultado es incorrecto."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"perl","modules":["perl"],"programFiles":["regcomp_study.c"],"programRoutines":[{"name":"Perl_study_chunk"}],"repo":"https://github.com/Perl/perl5","packageURL":"pkg:cpan/perl","versions":[{"version":"0","lessThan":"5.40.5-RC1","versionType":"custom","status":"affected"},{"version":"5.41.0","lessThan":"5.42.3-RC1","versionType":"custom","status":"affected"},{"version":"5.43.0","lessThan":"5.43.10","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T13:33:13.127997Z","id":"CVE-2026-13221","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary","description":[{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.43.9","matchCriteriaId":"3114EB35-3A49-4B90-9577-C80B1422D531"}]}]}],"references":[{"url":"https://github.com/Perl/perl5/commit/03f74bbbd3a68350d926ee93d56ee4808c28c4c7.patch","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"]},{"url":"https://github.com/Perl/perl5/issues/23388","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Issue Tracking"]},{"url":"http://www.openwall.com/lists/oss-security/2026/07/13/5","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}},{"cve":{"id":"CVE-2026-57432","sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","published":"2026-07-13T17:17:55.670","lastModified":"2026-11-10T13:19:28.523","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack.\n\nS_measure_struct adds each item's size times its repeat count to a running total with no overflow check, so a large repeat count in a pack or unpack template wraps the signed SSize_t total negative. The @, X, and x position codes then guard their moves with a signed length comparison that passes when the length is negative, advancing the buffer pointer out of bounds.\n\nA template derived from untrusted input can read heap memory past the buffer and return it to the caller."},{"lang":"es","value":"Las versiones de Perl hasta la 5.43.10 tienen un desbordamiento de entero en S_measure_struct que conduce a una lectura de pila fuera de límites en pack y unpack.\n\nS_measure_struct suma el tamaño de cada elemento multiplicado por su recuento de repeticiones a un total acumulado sin verificación de desbordamiento, por lo que un recuento de repeticiones grande en una plantilla de pack o unpack envuelve el total SSize_t con signo a negativo. Los códigos de posición @, X y x luego protegen sus movimientos con una comparación de longitud con signo que pasa cuando la longitud es negativa, avanzando el puntero del búfer fuera de límites.\n\nUna plantilla derivada de entrada no confiable puede leer memoria de pila más allá del búfer y devolverla al llamador."}],"affected":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","affectedData":[{"defaultStatus":"unaffected","collectionURL":"https://cpan.org/modules","packageName":"perl","modules":["perl"],"programFiles":["pp_pack.c"],"programRoutines":[{"name":"S_measure_struct"}],"repo":"https://github.com/Perl/perl5","packageURL":"pkg:cpan/perl","versions":[{"version":"0","lessThan":"5.40.5-RC1","versionType":"custom","status":"affected"},{"version":"5.41.0","lessThan":"5.42.3-RC1","versionType":"custom","status":"affected"},{"version":"5.43.0","lessThan":"5.43.11","versionType":"custom","status":"affected"}]}]},{"source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e","affectedData":[{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]},{"vendor":"Siemens","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)","defaultStatus":"unknown","versions":[{"version":"V3.1.7","lessThan":"*","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.5,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-07-14T13:34:38.894921Z","id":"CVE-2026-57432","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","type":"Secondary","description":[{"lang":"en","value":"CWE-125"},{"lang":"en","value":"CWE-190"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","versionEndIncluding":"5.43.10","matchCriteriaId":"8122F8D4-DD5A-4167-AB6A-BA1323CC4349"}]}]}],"references":[{"url":"https://github.com/Perl/perl5/commit/40754edc72dd3e513d758153c0e2f0215897740e.patch","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"]},{"url":"https://github.com/Perl/perl5/commit/5f7eb6bbbe0510964e3fb1d6bb691e5445913e55.patch","source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"]},{"url":"http://www.openwall.com/lists/oss-security/2026/07/13/6","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-457936.html","source":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"}]}}]}