|
|
| |
|
| |
perl: multiple vulnerabilities
| Package(s): | perl |
CVE #(s): | CVE-2011-3597
CVE-2011-2939
|
| Created: | November 3, 2011 |
Updated: | January 18, 2012 |
| Description: |
From the Red Hat bugzilla entries [1, 2]:
CVE-2011-3597: A flaw was reported in perl Digest module's "Digest->new()" function, which
did not properly sanitize input before using it in an eval() call, which could
possibly be exploited to inject and execute arbitrary perl code.
CVE-2011-2939: Perl bundles 'Encode' module that
contains 'Unicode.xs' file where a heap overflow bug has been fixed recently.
|
| Alerts: |
|
( Log in to post comments)
|
|
|