remote denial of service in perl

2005-12-2015:04:10

lists.opensuse.org

0.002 Low

EPSS

Percentile

51.6%

JSON

Integer overflows in the format string functionality in Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap.

Solution

There is no known workaround, please install the update packages.

OSVersionArchitecturePackageVersionFilename
openSUSE10.0i586perl< 5.8.7-5.3perl-5.8.7-5.3.i586.rpm
openSUSE9.0x86_64perl< 5.8.1-133perl-5.8.1-133.x86_64.rpm
openSUSE9.2x86_64perl< 5.8.5-3.5perl-5.8.5-3.5.x86_64.rpm
openSUSE9.3x86_64perl< 5.8.6-5.3perl-5.8.6-5.3.x86_64.rpm
openSUSE10.0x86_64perl< 5.8.7-5.3perl-5.8.7-5.3.x86_64.rpm
openSUSE9.2x86_64perl-32bit< 9.2-200512191352perl-32bit-9.2-200512191352.x86_64.rpm
openSUSE9.1x86_64perl< 5.8.3-32.9perl-5.8.3-32.9.x86_64.rpm
openSUSE9.3i586perl< 5.8.6-5.3perl-5.8.6-5.3.i586.rpm
openSUSE9.2i586perl< 5.8.5-3.5perl-5.8.5-3.5.i586.rpm
openSUSE9.1i586perl-32bit< 9.1-200512180858perl-32bit-9.1-200512180858.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	10.0	i586	perl	< 5.8.7-5.3	perl-5.8.7-5.3.i586.rpm
openSUSE	9.0	x86_64	perl	< 5.8.1-133	perl-5.8.1-133.x86_64.rpm
openSUSE	9.2	x86_64	perl	< 5.8.5-3.5	perl-5.8.5-3.5.x86_64.rpm
openSUSE	9.3	x86_64	perl	< 5.8.6-5.3	perl-5.8.6-5.3.x86_64.rpm
openSUSE	10.0	x86_64	perl	< 5.8.7-5.3	perl-5.8.7-5.3.x86_64.rpm
openSUSE	9.2	x86_64	perl-32bit	< 9.2-200512191352	perl-32bit-9.2-200512191352.x86_64.rpm
openSUSE	9.1	x86_64	perl	< 5.8.3-32.9	perl-5.8.3-32.9.x86_64.rpm
openSUSE	9.3	i586	perl	< 5.8.6-5.3	perl-5.8.6-5.3.i586.rpm
openSUSE	9.2	i586	perl	< 5.8.5-3.5	perl-5.8.5-3.5.i586.rpm
openSUSE	9.1	i586	perl-32bit	< 9.1-200512180858	perl-32bit-9.1-200512180858.i586.rpm