Description

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Remediation

References

CVE-2016-2381

Related Vulnerabilities

WordPress Plugin WP SVG Icons Multiple Unspecified Vulnerabilities (3.1.8.1)

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43729)

WordPress Plugin WPS Hide Login Security Bypass (1.9)

WordPress Plugin Responsive Menu-Create Mobile-Friendly Menu Multiple Vulnerabilities (4.0.3)

Jboss EAP Incomplete List of Disallowed Inputs Vulnerability (CVE-2018-7489)

Severity

High

Classification

CVE-2016-2381 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities