GCVE - cpe:2.3:a:perl:perl:5.8.9:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:perl:perl:5.8.9:*:*:*:*:*:*:*

part: a version: 5.8.9 update: *

Vendor	Perl (`1e08d0ea-f6e4-5b5b-a347-b9704b70f1d2`)
Product	Perl (`d036ec11-adad-5b60-822b-4cf91054fb72`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/perl`	purl2cpe	2026-06-01 10:17:05.106408
`pkg:deb/ubuntu/perl`	purl2cpe	2026-06-01 10:17:05.106409
`pkg:github/perl/perl5`	purl2cpe	2026-06-01 10:17:05.106411
`pkg:perl/perl5`	purl2cpe	2026-06-01 10:17:05.106412
`pkg:rpm/fedora/perl`	purl2cpe	2026-06-01 10:17:05.106414
`pkg:rpm/opensuse/perl`	purl2cpe	2026-06-01 10:17:05.106415

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2016-1238`	vulnerable	2026-06-03 14:35:31.055638	Details available (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory. Published: 2016-08-02T14:00:00.000Z Updated: 2024-08-05T22:48:13.656Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201701-75 https://security.gentoo.org/glsa/201812-07 http://perl5.git.perl.org/perl.git/commit/cee96d52c39b1e7b36e1c62d38bcd8d86e9a41ab http://www.securitytracker.com/id/1036440 http://www.debian.org/security/2016/dsa-3628	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-1667`	vulnerable	2026-06-03 14:32:50.745587	Details available The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key. Published: 2013-03-12T16:00:00.000Z Updated: 2024-08-06T15:13:31.612Z Open on db.gcve.eu Reference links http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html http://www.nntp.perl.org/group/perl.perl5.porters/2013/03/msg199755.html http://secunia.com/advisories/52472 http://www.mandriva.com/security/advisories?name=MDVSA-2013:113 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0094	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2939`	vulnerable	2026-06-03 14:31:11.377626	Details available Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow. Published: 2012-01-13T18:00:00.000Z Updated: 2024-08-06T23:15:31.951Z Open on db.gcve.eu Reference links http://secunia.com/advisories/46989 http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod http://secunia.com/advisories/55314 http://www.ubuntu.com/usn/USN-1643-1 http://www.securityfocus.com/bid/49858	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2728`	vulnerable	2026-06-03 14:31:10.540461	Details available The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference. Published: 2012-12-21T02:00:00.000Z Updated: 2024-08-06T23:08:23.771Z Open on db.gcve.eu Reference links http://cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod http://perl5.git.perl.org/perl.git/commit/1af4051e077438976a4c12a0622feaf6715bec77 https://blogs.oracle.com/sunsecurity/entry/cve_2011_2728_denial_of1 http://lists.fedoraproject.org/pipermail/package-announce/2011-November/069752.html http://www.securityfocus.com/bid/49858	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1158`	vulnerable	2026-06-03 14:30:12.752724	Details available Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string. Published: 2010-04-20T15:00:00.000Z Updated: 2024-08-07T01:14:06.375Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=313565 http://www.openwall.com/lists/oss-security/2010/04/14/3 http://www.openwall.com/lists/oss-security/2010/04/08/9 http://secunia.com/advisories/55314 https://bugzilla.redhat.com/show_bug.cgi?id=580605	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.