CVE-2016-1238: High severity debian linux vulnerability

Published Aug 2, 2016
·
Updated

(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/jsonpp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.

Affected Software

253 affected components
Debian Debian Linux=8.0
Fedoraproject Fedora=23
Fedoraproject Fedora=24
Perl Perl=1.0.15
Perl Perl=1.0.16
Perl Perl=5.000
Perl Perl=5.000o
Perl Perl=5.001
Perl Perl=5.001n
Perl Perl=5.002
Perl Perl=5.002_01
Perl Perl=5.003
Perl Perl=5.003_01
Perl Perl=5.003_02
Perl Perl=5.003_03
Perl Perl=5.003_04
Perl Perl=5.003_05
Perl Perl=5.003_07
Perl Perl=5.003_08
Perl Perl=5.003_09
Perl Perl=5.003_10
Perl Perl=5.003_11
Perl Perl=5.003_12
Perl Perl=5.003_13
Perl Perl=5.003_14
Perl Perl=5.003_15
Perl Perl=5.003_16
Perl Perl=5.003_17
Perl Perl=5.003_18
Perl Perl=5.003_19
Perl Perl=5.003_20
Perl Perl=5.003_21
Perl Perl=5.003_22
Perl Perl=5.003_23
Perl Perl=5.003_24
Perl Perl=5.003_25
Perl Perl=5.003_26
Perl Perl=5.003_27
Perl Perl=5.003_28
Perl Perl=5.003_90
Perl Perl=5.003_91
Perl Perl=5.003_92
Perl Perl=5.003_93
Perl Perl=5.003_94
Perl Perl=5.003_95
Perl Perl=5.003_96
Perl Perl=5.003_97
Perl Perl=5.003_97a
Perl Perl=5.003_97b
Perl Perl=5.003_97c
Perl Perl=5.003_97d
Perl Perl=5.003_97e
Perl Perl=5.003_97f
Perl Perl=5.003_97g
Perl Perl=5.003_97h
Perl Perl=5.003_97i
Perl Perl=5.003_97j
Perl Perl=5.003_98
Perl Perl=5.003_99
Perl Perl=5.003_99a
Perl Perl=5.004
Perl Perl=5.004_01
Perl Perl=5.004_02
Perl Perl=5.004_03
Perl Perl=5.004_04
Perl Perl=5.004_05
Perl Perl=5.005
Perl Perl=5.005_01
Perl Perl=5.005_02
Perl Perl=5.005_03
Perl Perl=5.005_04
Perl Perl=5.6
Perl Perl=5.6.0
Perl Perl=5.6.1
Perl Perl=5.6.2
Perl Perl=5.7.3
Perl Perl=5.8
Perl Perl=5.8.0
Perl Perl=5.8.1
Perl Perl=5.8.2
Perl Perl=5.8.3
Perl Perl=5.8.4
Perl Perl=5.8.5
Perl Perl=5.8.6
Perl Perl=5.8.7
Perl Perl=5.8.8
Perl Perl=5.8.9
Perl Perl=5.8.9-rc1
Perl Perl=5.9.0
Perl Perl=5.9.1
Perl Perl=5.9.2
Perl Perl=5.9.3
Perl Perl=5.9.4
Perl Perl=5.9.5
Perl Perl=5.10
Perl Perl=5.10.0
Perl Perl=5.10.1
Perl Perl=5.10.1-rc1
Perl Perl=5.10.1-rc2
Perl Perl=5.11.0
Perl Perl=5.11.1
Perl Perl=5.11.2
Perl Perl=5.11.3
Perl Perl=5.11.4
Perl Perl=5.11.5
Perl Perl=5.12.0
Perl Perl=5.12.0-rc0
Perl Perl=5.12.0-rc1
Perl Perl=5.12.0-rc2
Perl Perl=5.12.0-rc3
Perl Perl=5.12.0-rc4
Perl Perl=5.12.0-rc5
Perl Perl=5.12.1
Perl Perl=5.12.1-rc0
Perl Perl=5.12.1-rc1
Perl Perl=5.12.1-rc2
Perl Perl=5.12.2
Perl Perl=5.12.2-rc1
Perl Perl=5.12.3
Perl Perl=5.12.3-rc1
Perl Perl=5.12.3-rc2
Perl Perl=5.12.3-rc3
Perl Perl=5.12.4
Perl Perl=5.12.4-rc1
Perl Perl=5.12.4-rc2
Perl Perl=5.12.5
Perl Perl=5.12.5-rc1
Perl Perl=5.12.5-rc2
Perl Perl=5.13.0
Perl Perl=5.13.1
Perl Perl=5.13.2
Perl Perl=5.13.3
Perl Perl=5.13.4
Perl Perl=5.13.5
Perl Perl=5.13.6
Perl Perl=5.13.7
Perl Perl=5.13.8
Perl Perl=5.13.9
Perl Perl=5.13.10
Perl Perl=5.13.11
Perl Perl=5.14.0
Perl Perl=5.14.0-rc1
Perl Perl=5.14.0-rc2
Perl Perl=5.14.0-rc3
Perl Perl=5.14.1
Perl Perl=5.14.1-rc1
Perl Perl=5.14.2
Perl Perl=5.14.2-rc1
Perl Perl=5.14.3
Perl Perl=5.14.3-rc1
Perl Perl=5.14.3-rc2
Perl Perl=5.14.4
Perl Perl=5.14.4-rc1
Perl Perl=5.14.4-rc2
Perl Perl=5.15.0
Perl Perl=5.15.1
Perl Perl=5.15.2
Perl Perl=5.15.3
Perl Perl=5.15.4
Perl Perl=5.15.5
Perl Perl=5.15.6
Perl Perl=5.15.7
Perl Perl=5.15.8
Perl Perl=5.15.9
Perl Perl=5.16.0
Perl Perl=5.16.0-rc1
Perl Perl=5.16.0-rc2
Perl Perl=5.16.1
Perl Perl=5.16.2
Perl Perl=5.16.3
Perl Perl=5.16.3-rc1
Perl Perl=5.17.0
Perl Perl=5.17.1
Perl Perl=5.17.2
Perl Perl=5.17.3
Perl Perl=5.17.4
Perl Perl=5.17.5
Perl Perl=5.17.6
Perl Perl=5.17.7
Perl Perl=5.17.7.0
Perl Perl=5.17.8
Perl Perl=5.17.9
Perl Perl=5.17.10
Perl Perl=5.17.11
Perl Perl=5.18.0
Perl Perl=5.18.0-rc1
Perl Perl=5.18.0-rc2
Perl Perl=5.18.0-rc3
Perl Perl=5.18.0-rc4
Perl Perl=5.18.1
Perl Perl=5.18.2
Perl Perl=5.18.2-rc1
Perl Perl=5.18.2-rc2
Perl Perl=5.18.2-rc3
Perl Perl=5.18.2-rc4
Perl Perl=5.18.3
Perl Perl=5.18.3-rc1
Perl Perl=5.18.3-rc2
Perl Perl=5.18.4
Perl Perl=5.19.0
Perl Perl=5.19.1
Perl Perl=5.19.2
Perl Perl=5.19.3
Perl Perl=5.19.4
Perl Perl=5.19.5
Perl Perl=5.19.6
Perl Perl=5.19.7
Perl Perl=5.19.8
Perl Perl=5.19.9
Perl Perl=5.19.10
Perl Perl=5.19.11
Perl Perl=5.20.0
Perl Perl=5.20.0-rc1
Perl Perl=5.20.1
Perl Perl=5.20.1-rc1
Perl Perl=5.20.1-rc2
Perl Perl=5.20.2
Perl Perl=5.20.2-rc1
Perl Perl=5.20.3
Perl Perl=5.20.3-rc1
Perl Perl=5.20.3-rc2
Perl Perl=5.21.0
Perl Perl=5.21.1
Perl Perl=5.21.2
Perl Perl=5.21.3
Perl Perl=5.21.4
Perl Perl=5.21.5
Perl Perl=5.21.6
Perl Perl=5.21.7
Perl Perl=5.21.8
Perl Perl=5.21.9
Perl Perl=5.21.10
Perl Perl=5.21.11
Perl Perl=5.22.0
Perl Perl=5.22.0-rc1
Perl Perl=5.22.0-rc2
Perl Perl=5.22.1
Perl Perl=5.22.1-rc1
Perl Perl=5.22.1-rc2
Perl Perl=5.22.1-rc3
Perl Perl=5.22.1-rc4
Perl Perl=5.22.2
Perl Perl=5.22.2-rc1
Perl Perl=5.22.3-rc1
Perl Perl=5.24.0
Perl Perl=5.24.0-rc1
Perl Perl=5.24.0-rc2
Perl Perl=5.24.0-rc3
Perl Perl=5.24.0-rc4
Perl Perl=5.24.0-rc5
Perl Perl=5.24.1-rc1
openSUSE Leap=15.0
Apache SpamAssassin<3.4.2

Event History

Aug 2, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2016-1238?

CVE-2016-1238 is classified as a moderate severity vulnerability.

2

How do I fix CVE-2016-1238?

To fix CVE-2016-1238, you should update your Perl packages to the latest versions that address this vulnerability.

3

What products are affected by CVE-2016-1238?

CVE-2016-1238 impacts several versions of Perl and specific distributions such as Debian 8.0 and Fedora versions 23 and 24.

4

What are the potential impacts of CVE-2016-1238?

The potential impacts of CVE-2016-1238 include denial of service and unauthorized access, depending on the context of the Perl applications in use.

5

Was CVE-2016-1238 disclosed publicly?

Yes, CVE-2016-1238 was publicly disclosed and is documented in multiple security advisories.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203