Lucene search

[email protected]NVD:CVE-2021-36770

HistoryAug 11, 2021 - 11:15 p.m.

CVE-2021-36770

2021-08-1123:15:07

CWE-427

[email protected]

web.nvd.nist.gov

encode.pm

perl

privilege escalation

trojan horse

dynamic module loading

unusual configuration

2021 versions

|| operator

@inc

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.9%

JSON

Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator evaluates @INC in a scalar context, and thus @INC has only an integer value.

Affected configurations

Nvd

Node

p5-encode_projectp5-encodeRange3.05–3.12

AND

perlperlRange≤5.34.0

Node

fedoraprojectfedoraMatch34

Node

fedoraprojectfedoraMatch33

VendorProductVersionCPE
p5-encode_projectp5-encode*cpe:2.3:a:p5-encode_project:p5-encode:*:*:*:*:*:*:*:*
perlperl*cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*
fedoraprojectfedora34cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
fedoraprojectfedora33cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
p5-encode_project	p5-encode	*	cpe:2.3:a:p5-encode_project:p5-encode::::::::
perl	perl	*	cpe:2.3:a:perl:perl::::::::
fedoraproject	fedora	34	cpe:2.3:o:fedoraproject:fedora:34:::::::*
fedoraproject	fedora	33	cpe:2.3:o:fedoraproject:fedora:33:::::::*