https://bugzilla.redhat.com/show_bug.cgi?id=1857318
Bug ID: 1857318
Summary: CVE-2015-8608 perl: out-of-bounds read and buffer
overflow in functions VDir::MapPathA and
VDir::MapPathW via crafted a drive letter or a pInName
argument
Product: Security Response
Hardware: All
OS: Linux
Status: NEW
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: gsuckevi(a)redhat.com
CC: caillon+fedoraproject(a)gmail.com, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
psabata(a)redhat.com, rhughes(a)redhat.com,
sandmann(a)redhat.com, spotrh(a)gmail.com
Target Milestone: ---
Classification: Other
The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote
attackers to cause a denial of service (out-of-bounds read) and possibly
execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.
Reference:
https://rt.perl.org/Public/Bug/Display.html?id=126755
--
You are receiving this mail because:
You are on the CC list for the bug.