NetSight
IP …
high7.8

CVE-2016-6185

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitra…

Impact

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.

Affected products

VendorProductAffected versions
PerlPerl
from 5.23.0 before 5.24.1
from 5.25.0 before 5.25.3
FedoraprojectFedora
Versions 22, 23, 24
DebianDebian Linux
Version 8.0
OracleSolaris
Versions 10, 11.3
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 17.10

References