Description

The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.

Remediation

References

CVE-2015-8608

Related Vulnerabilities

Apache Tomcat directory host Appbase authentication bypass vulnerability

WordPress Plugin Transposh WordPress Translation Multiple Cross-Site Scripting Vulnerabilities (1.0.7)

MySQL CVE-2016-0648 Vulnerability (CVE-2016-0648)

Oracle Application Server CVE-2008-0343 Vulnerability (CVE-2008-0343)

Python Uncontrolled Resource Consumption Vulnerability (CVE-2021-3733)

Severity

Critical

Classification

CVE-2015-8608 CWE-125 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities