Description

The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

Remediation

References

CVE-2011-2728

Related Vulnerabilities

Drupal Core 7.x Multiple Vulnerabilities (7.0 - 7.34)

WordPress Plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance Cross-Site Scripting (1.7.1)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Arbitrary File Upload (3.4.4)

Jenkins Improper Authentication Vulnerability (CVE-2017-1000354)

WordPress Plugin MDC YouTube Downloader Local File Inclusion (2.1.0)

Severity

Medium

Classification

CVE-2011-2728

Tags

Missing Update Known Vulnerabilities