← Retour
CLSA-2023-1701293817
Vulnérabilité dans perl (CLSA-2023-1701293817)
Résumé
vulnérabilité dans perl (CLSA-2023-1701293817). Risque d'opérations non autorisées ou de divulgation. Atténuation : mise à jour vers `4:5.32.1-480.el9.tuxcare.els1` ou plus.
Résumé IA snake-internal / snake-material-v2
Une vulnérabilité référencée **CLSA-2023-1701293817** a été découverte dans perl.
Risque d'opérations non autorisées ou de divulgation. Score CVSS : ?/10.
Action : mettez à jour perl vers **4:5.32.1-480.el9.tuxcare.els1** ou supérieur.
En cas de doute, contactez votre service informatique ou cherchez « perl CLSA-2023-1701293817 » sur le site de l'éditeur.
CLSA-2023-1701293817 (perl) —
Correctif : `4:5.32.1-480.el9.tuxcare.els1` — appliquer immédiatement
Plan : 1) Audit SBOM, 2) Mise à jour staging→prod, 3) Surveillance WAF/proxy sur les endpoints affectés, 4) Recherche d'IOC dans les logs.
Réfs : voir GHSA / avis éditeur / version corrigée liés sur cette page.
❓ Quel est le problème
Une **vulnérabilité** (non classée) affecte perl.
📍 Périmètre concerné
perl — .
🔥 Gravité
Gravité : ?. Risque d'opérations non autorisées ou de divulgation
🔧 Comment corriger
Mettre à jour vers **4:5.32.1-480.el9.tuxcare.els1**.
🛡️ Contournement
En attendant le correctif : désactivez la fonctionnalité concernée, appliquez des règles WAF, ou restreignez l'accès par ACL réseau.
🔍 Détection
Recherchez dans les logs des requêtes correspondant aux IOC connus de cette CVE. Auditez les SBOM/dépendances.
Actions de réponse (7 étapes)
Étapes concrètes et exemples de commandes que les équipes SOC/SRE doivent exécuter dans l'ordre
-
1Identify exposure identify
grep -r 'perl' . | grep -v node_modulesリポジトリと本番環境の依存ファイル (package-lock.json / requirements.txt / go.sum / Gemfile.lock 等) で `perl` を grep し、稼働しているサービス・バージョンを把握する。
-
6Apply patch patch
Upgrade perl to 4:5.32.1-480.el9.tuxcare.els1ステージング環境で 4:5.32.1-480.el9.tuxcare.els1 に上げて回帰テスト → 本番反映。回帰テストはアプリの主要ハッピーパスと、Step 3 で見つけた異常検知の続報チェックを含めること。
-
7Post-deployment verification verify
Confirm patched version is live in productionパッチ適用後、ステージングで PoC または同等の悪用パターンを再現して脆弱性が閉じたことを確認。本番では Step 3 と同じログクエリでアラート再発が無いか継続監視。
Paquets affectés
TuxCare:AlmaLinux:9.2
perl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Attribute-Handlers
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.01-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-AutoLoader
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.74-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-AutoSplit
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.74-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-B
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.80-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Benchmark
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Class-Struct
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.66-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Config-Extensions
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-DBM_Filter
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.06-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Devel-Peek
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.28-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Devel-SelfStubber
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-DirHandle
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.05-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Dumpvalue
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-DynaLoader
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.47-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-English
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Errno
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.30-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-ExtUtils-Constant
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.25-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-ExtUtils-Embed
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.35-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-ExtUtils-Miniperl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.09-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Fcntl
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-Basename
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.85-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-Compare
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.100.600-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-Copy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.34-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-DosGlob
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-Find
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-File-stat
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.09-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-FileCache
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-FileHandle
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-FindBin
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.51-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-GDBM_File
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.18-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Getopt-Std
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Hash-Util
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Hash-Util-FieldHash
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.20-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-I18N-Collate
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.02-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-I18N-LangTags
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.44-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-I18N-Langinfo
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.19-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-IO
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-IPC-Open3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.21-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Locale-Maketext-Simple
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.21-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Math-Complex
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.59-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Memoize
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Module-Loaded
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.08-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-NDBM_File
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-NEXT
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.67-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Net
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.02-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-ODBM_File
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Opcode
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.48-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-POSIX
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.94-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Pod-Functions
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.13-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Pod-Html
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Safe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.41-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Search-Dict
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.07-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-SelectSaver
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.02-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-SelfLoader
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Symbol
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.08-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Sys-Hostname
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Term-Complete
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.403-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Term-ReadLine
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Test
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Text-Abbrev
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.02-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Thread
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.05-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Thread-Semaphore
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.13-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Tie
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.6-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Tie-File
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.06-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Tie-Memoize
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Time
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Time-Piece
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3401-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-Unicode-UCD
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.75-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-User-pwent
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-autouse
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-base
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-blib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.07-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-debugger
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.56-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-deprecate
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.04-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-devel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-diagnostics
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.37-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-doc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-encoding-warnings
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.13-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-fields
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.27-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-filetest
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-if
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.60.800-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-interpreter
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-less
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-lib
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.65-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-libnetcfg
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-libs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-locale
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.09-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-macros
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-meta-notation
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-mro
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-open
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-overload
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.31-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-overloading
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.02-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-ph
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-sigtrap
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.09-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-sort
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.04-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-subs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.03-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-tests
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-utils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.32.1-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-vars
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.05-480.el9.tuxcare.els1"}]}]
TuxCare:AlmaLinux:9.2
perl-vmsish
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.04-480.el9.tuxcare.els1"}]}]