CVE-2016-2381
Fixed in a distro release EPSS 9%
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
Products: perl, debian_linux, oracle communications_billing_and_revenue_management, oracle configuration_manager, oracle database_server, oracle enterprise_manager_base_platform, oracle timesten_in-memory_database, oracle solaris, opensuse, canonical ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | perl | 5.22.1-8 |
| Debian 13 | perl | 5.22.1-8 |
| Debian 14 | perl | 5.22.1-8 |
| Debian 7 | perl | 5.14.2-21+deb7u3 |
| Debian 8 | perl | 5.20.2-3+deb8u4 |
| Red Hat hummingbird 1 | perl | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-Attribute-Handlers | 0:1.03-524.hum1 |
| Red Hat hummingbird 1 | perl-AutoLoader | 0:5.74-524.hum1 |
| Red Hat hummingbird 1 | perl-AutoSplit | 0:5.74-524.hum1 |
| Red Hat hummingbird 1 | perl-B | 0:1.89-524.hum1 |
| Red Hat hummingbird 1 | perl-Benchmark | 0:1.27-524.hum1 |
| Red Hat hummingbird 1 | perl-Class-Struct | 0:0.68-524.hum1 |
| Red Hat hummingbird 1 | perl-Config-Extensions | 0:0.03-524.hum1 |
| Red Hat hummingbird 1 | perl-DBM_Filter | 0:0.07-524.hum1 |
| Red Hat hummingbird 1 | perl-Devel-Peek | 0:1.36-524.hum1 |
| Red Hat hummingbird 1 | perl-Devel-SelfStubber | 0:1.06-524.hum1 |
| Red Hat hummingbird 1 | perl-DirHandle | 0:1.05-524.hum1 |
| Red Hat hummingbird 1 | perl-Dumpvalue | 0:2.27-524.hum1 |
| Red Hat hummingbird 1 | perl-DynaLoader | 0:1.57-524.hum1 |
| Red Hat hummingbird 1 | perl-English | 0:1.11-524.hum1 |
| Red Hat hummingbird 1 | perl-Errno | 0:1.38-524.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Constant | 0:0.25-524.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Embed | 0:1.35-524.hum1 |
| Red Hat hummingbird 1 | perl-ExtUtils-Miniperl | 0:1.14-524.hum1 |
| Red Hat hummingbird 1 | perl-Fcntl | 0:1.20-524.hum1 |
| Red Hat hummingbird 1 | perl-File-Basename | 0:2.86-524.hum1 |
| Red Hat hummingbird 1 | perl-File-Compare | 0:1.100.800-524.hum1 |
| Red Hat hummingbird 1 | perl-File-Copy | 0:2.41-524.hum1 |
| Red Hat hummingbird 1 | perl-File-DosGlob | 0:1.12-524.hum1 |
| Red Hat hummingbird 1 | perl-File-Find | 0:1.44-524.hum1 |
| Red Hat hummingbird 1 | perl-File-stat | 0:1.14-524.hum1 |
| Red Hat hummingbird 1 | perl-FileCache | 0:1.10-524.hum1 |
| Red Hat hummingbird 1 | perl-FileHandle | 0:2.05-524.hum1 |
| Red Hat hummingbird 1 | perl-FindBin | 0:1.54-524.hum1 |
| Red Hat hummingbird 1 | perl-GDBM_File | 0:1.24-524.hum1 |
| Red Hat hummingbird 1 | perl-Getopt-Std | 0:1.14-524.hum1 |
| Red Hat hummingbird 1 | perl-Hash-Util | 0:0.32-524.hum1 |
| Red Hat hummingbird 1 | perl-Hash-Util-FieldHash | 0:1.27-524.hum1 |
| Red Hat hummingbird 1 | perl-I18N-Collate | 0:1.02-524.hum1 |
| Red Hat hummingbird 1 | perl-I18N-LangTags | 0:0.45-524.hum1 |
| Red Hat hummingbird 1 | perl-I18N-Langinfo | 0:0.24-524.hum1 |
| Red Hat hummingbird 1 | perl-IO | 0:1.55-524.hum1 |
| Red Hat hummingbird 1 | perl-IPC-Open3 | 0:1.24-524.hum1 |
| Red Hat hummingbird 1 | perl-Locale-Maketext-Simple | 0:0.21-524.hum1 |
| Red Hat hummingbird 1 | perl-Math-Complex | 0:1.63-524.hum1 |
| Red Hat hummingbird 1 | perl-Memoize | 0:1.17-524.hum1 |
| Red Hat hummingbird 1 | perl-Module-Loaded | 0:0.08-524.hum1 |
| Red Hat hummingbird 1 | perl-NDBM_File | 0:1.18-524.hum1 |
| Red Hat hummingbird 1 | perl-NEXT | 0:0.69-524.hum1 |
| Red Hat hummingbird 1 | perl-Net | 0:1.04-524.hum1 |
| Red Hat hummingbird 1 | perl-ODBM_File | 0:1.20-524.hum1 |
| Red Hat hummingbird 1 | perl-Opcode | 0:1.69-524.hum1 |
| Red Hat hummingbird 1 | perl-POSIX | 0:2.23-524.hum1 |
| Red Hat hummingbird 1 | perl-Pod-Functions | 0:1.14-524.hum1 |
| Red Hat hummingbird 1 | perl-Pod-Html | 0:1.35-524.hum1 |
| Red Hat hummingbird 1 | perl-Safe | 0:2.47-524.hum1 |
| Red Hat hummingbird 1 | perl-Search-Dict | 0:1.08-524.hum1 |
| Red Hat hummingbird 1 | perl-SelectSaver | 0:1.02-524.hum1 |
| Red Hat hummingbird 1 | perl-SelfLoader | 0:1.28-524.hum1 |
| Red Hat hummingbird 1 | perl-Symbol | 0:1.09-524.hum1 |
| Red Hat hummingbird 1 | perl-Sys-Hostname | 0:1.25-524.hum1 |
| Red Hat hummingbird 1 | perl-Term-Complete | 0:1.403-524.hum1 |
| Red Hat hummingbird 1 | perl-Term-ReadLine | 0:1.17-524.hum1 |
| Red Hat hummingbird 1 | perl-Test | 0:1.31-524.hum1 |
| Red Hat hummingbird 1 | perl-Text-Abbrev | 0:1.02-524.hum1 |
| Red Hat hummingbird 1 | perl-Thread | 0:3.06-524.hum1 |
| Red Hat hummingbird 1 | perl-Thread-Semaphore | 0:2.13-524.hum1 |
| Red Hat hummingbird 1 | perl-Tie | 0:4.6-524.hum1 |
| Red Hat hummingbird 1 | perl-Tie-File | 0:1.10-524.hum1 |
| Red Hat hummingbird 1 | perl-Tie-Memoize | 0:1.1-524.hum1 |
| Red Hat hummingbird 1 | perl-Time | 0:1.04-524.hum1 |
| Red Hat hummingbird 1 | perl-Time-Piece | 0:1.3600-524.hum1 |
| Red Hat hummingbird 1 | perl-Unicode-UCD | 0:0.81-524.hum1 |
| Red Hat hummingbird 1 | perl-User-pwent | 0:1.05-524.hum1 |
| Red Hat hummingbird 1 | perl-autouse | 0:1.11-524.hum1 |
| Red Hat hummingbird 1 | perl-base | 0:2.27-524.hum1 |
| Red Hat hummingbird 1 | perl-blib | 0:1.07-524.hum1 |
| Red Hat hummingbird 1 | perl-debugger | 0:1.60-524.hum1 |
| Red Hat hummingbird 1 | perl-deprecate | 0:0.04-524.hum1 |
| Red Hat hummingbird 1 | perl-devel | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-diagnostics | 0:1.40-524.hum1 |
| Red Hat hummingbird 1 | perl-doc | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-encoding-warnings | 0:0.14-524.hum1 |
| Red Hat hummingbird 1 | perl-fields | 0:2.27-524.hum1 |
| Red Hat hummingbird 1 | perl-filetest | 0:1.03-524.hum1 |
| Red Hat hummingbird 1 | perl-if | 0:0.61.000-524.hum1 |
| Red Hat hummingbird 1 | perl-interpreter | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-less | 0:0.03-524.hum1 |
| Red Hat hummingbird 1 | perl-lib | 0:0.65-524.hum1 |
| Red Hat hummingbird 1 | perl-libnetcfg | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-libs | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-locale | 0:1.13-524.hum1 |
| Red Hat hummingbird 1 | perl-macros | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-meta-notation | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-mro | 0:1.29-524.hum1 |
| Red Hat hummingbird 1 | perl-open | 0:1.13-524.hum1 |
| Red Hat hummingbird 1 | perl-overload | 0:1.40-524.hum1 |
| Red Hat hummingbird 1 | perl-overloading | 0:0.02-524.hum1 |
| Red Hat hummingbird 1 | perl-ph | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-sigtrap | 0:1.10-524.hum1 |
| Red Hat hummingbird 1 | perl-sort | 0:2.06-524.hum1 |
| Red Hat hummingbird 1 | perl-subs | 0:1.04-524.hum1 |
| Red Hat hummingbird 1 | perl-tests | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-utils | 0:5.42.2-524.hum1 |
| Red Hat hummingbird 1 | perl-vars | 0:1.05-524.hum1 |
| Red Hat hummingbird 1 | perl-vmsish | 0:1.04-524.hum1 |
| SUSE Linux Enterprise Desktop 12 SP1 | perl | 5.18.2-11.1 |
| SUSE Linux Enterprise Server 11 SP4 | perl | 5.10.0-64.80.1 |
| SUSE Linux Enterprise Server 12 SP1 | perl | 5.18.2-11.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | perl | 5.10.0-64.80.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | perl | 5.18.2-11.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | perl | 5.10.0-64.80.1 |
| Ubuntu 14.04 LTS | perl | 5.18.2-2ubuntu1.1 |