CVE-2011-2728: Medium severity perl 5.30.0 vulnerability
Published Dec 21, 2012
·Updated
The bsdglob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOBALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
Affected Software
141 affected components
Perl Perl<=5.14.1
Perl Perl=1.00
Perl Perl=1.01
Perl Perl=1.20
Perl Perl=1.21
Perl Perl=1.22
Perl Perl=1.31
Perl Perl=1.32
Perl Perl=1.40
Perl Perl=1.41
Perl Perl=1.42
Perl Perl=1.43
Perl Perl=1.44
Perl Perl=1.45
Perl Perl=1.46
Perl Perl=1.47
Perl Perl=1.48
Perl Perl=1.49
Perl Perl=2.0.0
Perl Perl=2.1.0
Perl Perl=2.1.1
Perl Perl=2.1.2
Perl Perl=2.1.3
Perl Perl=2.2.0
Perl Perl=2.2.1
Perl Perl=2.2.2
Perl Perl=2.3.0
Perl Perl=2.4.0
Perl Perl=2.5.0
Perl Perl=2.5.1
Perl Perl=2.6.0
Perl Perl=2.6.1
Perl Perl=2.6.2
Perl Perl=2.6.3
Perl Perl=2.6.4
Perl Perl=2.6.5
Perl Perl=2.6.6
Perl Perl=2.7.0
Perl Perl=2.7.1
Perl Perl=2.7.2
Perl Perl=2.8.0
Perl Perl=2.8.1
Perl Perl=2.8.2
Perl Perl=2.8.3
Perl Perl=2.8.4
Perl Perl=2.8.5
Perl Perl=2.8.6
Perl Perl=2.8.7
Perl Perl=2.8.8
Perl Perl=2.9.0
Perl Perl=2.9.1
Perl Perl=2.9.2
Perl Perl=2.10.0
Perl Perl=2.10.1
Perl Perl=2.10.2
Perl Perl=2.10.3
Perl Perl=2.10.4
Perl Perl=2.10.5
Perl Perl=2.10.6
Perl Perl=2.10.7
Perl Perl=2.11.0
Perl Perl=2.11.1
Perl Perl=2.11.2
Perl Perl=2.11.3
Perl Perl=2.11.4
Perl Perl=2.11.5
Perl Perl=2.11.6
Perl Perl=2.11.7
Perl Perl=2.11.8
Perl Perl=2.12.0
Perl Perl=2.13.0
Perl Perl=2.14.0
Perl Perl=2.14.1
Perl Perl=2.15.0
Perl Perl=2.15.1
Perl Perl=2.16.0
Perl Perl=2.16.1
Perl Perl=2.17.0
Perl Perl=2.17.1
Perl Perl=2.17.2
Perl Perl=2.18.0
Perl Perl=2.18.1
Perl Perl=5.6.0
Perl Perl=5.6.1
Perl Perl=5.8.0
Perl Perl=5.8.1
Perl Perl=5.8.2
Perl Perl=5.8.3
Perl Perl=5.8.4
Perl Perl=5.8.5
Perl Perl=5.8.6
Perl Perl=5.8.7
Perl Perl=5.8.8
Perl Perl=5.8.9
Perl Perl=5.8.10
Perl Perl=5.9.2
Perl Perl=5.10
Perl Perl=5.10.0
Perl Perl=5.10.0-rc1
Perl Perl=5.10.0-rc2
Perl Perl=5.10.1
Perl Perl=5.10.1-rc1
Perl Perl=5.10.1-rc2
Perl Perl=5.11.0
Perl Perl=5.11.1
Perl Perl=5.11.2
Perl Perl=5.11.3
Perl Perl=5.11.4
Perl Perl=5.11.5
Perl Perl=5.12.0
Perl Perl=5.12.0-rc0
Perl Perl=5.12.0-rc1
Perl Perl=5.12.0-rc2
Perl Perl=5.12.0-rc3
Perl Perl=5.12.0-rc4
Perl Perl=5.12.0-rc5
Perl Perl=5.12.1
Perl Perl=5.12.1-rc1
Perl Perl=5.12.1-rc2
Perl Perl=5.12.2
Perl Perl=5.12.2-rc1
Perl Perl=5.12.3
Perl Perl=5.12.3-rc1
Perl Perl=5.12.3-rc2
Perl Perl=5.12.3-rc3
Perl Perl=5.13.0
Perl Perl=5.13.1
Perl Perl=5.13.2
Perl Perl=5.13.3
Perl Perl=5.13.4
Perl Perl=5.13.5
Perl Perl=5.13.6
Perl Perl=5.13.7
Perl Perl=5.13.8
Perl Perl=5.13.9
Perl Perl=5.13.10
Perl Perl=5.13.11
Perl Perl=5.14.0
Perl Perl=5.14.0-rc1
Perl Perl=5.14.0-rc2
Perl Perl=5.14.0-rc3
Event History
Dec 21, 2012
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2728?
CVE-2011-2728 is classified as a denial of service vulnerability.
2
How do I fix CVE-2011-2728?
To fix CVE-2011-2728, upgrade Perl to version 5.14.2 or later.
3
What causes the vulnerability CVE-2011-2728?
CVE-2011-2728 is caused by uninitialized pointer dereference in the bsd_glob function of the File::Glob module.
4
Which versions of Perl are affected by CVE-2011-2728?
CVE-2011-2728 affects Perl versions prior to 5.14.2.
5
Can CVE-2011-2728 be exploited remotely?
Yes, CVE-2011-2728 can potentially be exploited remotely through crafted glob expressions.