CVE-2024-10224

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute a...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Qualys discovered that if unsanitized input was used with the library Modules::ScanDeps, before version 1.36 a local attacker could possibly execute arbitrary shell commands by open()ing a "pesky pipe" (such as passing "commands|" as a filename) or by passing arbitrary strings to eval().

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Alpine Linux ALPINE-CVE-2024-10224 perl-module-scandeps Corrigé dans: 1.37-r0
Debian DEBIAN-CVE-2024-10224 libmodule-scandeps-perl Corrigé dans: 1.30-1+deb11u1

Références

advisory github.com
advisory github.com
advisory nvd.nist.gov
advisory qualys.com
package github.com
report cve.org
web seclists.org
web seclists.org
web lists.debian.org
web openwall.com