REDHAT-BUG-576508: Medium severity CPAN Safe.pm vulnerability
Safe.pm 2.24 and earlier, when used in Perl 5.10.0 and earlier, may allow attackers to break out of safe compartment in (1) Safe::reval or (2) Safe::rdo using implicitly called methods (such as DESTROY or AUTOLOAD) on implicitly blessed Perl objects, returned as a result of unsafe code evaluation. These methods could have been executed unrestricted by Safe, when such objects were accessed or destroyed. If a victim was tricked into running a specially-crafted Perl script, using Safe extension module, it could lead to intended Safe module restriction bypass. Different vulnerability than CVE-2010-1447.
Solution: Upgrade to Safe.pm v2.25 or higher.
References: [1] http://search.cpan.org/~rgarcia/Safe-2.27/Safe.pm
Acknowledgements:
Red Hat would like to thank Tim Bunce for responsibly reporting this issue. Upstream acknowledges Nick Cleaton as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-576508?
The severity of REDHAT-BUG-576508 is considered moderate as it can lead to unauthorized access through escaping the safe compartment.
How do I fix REDHAT-BUG-576508?
To fix REDHAT-BUG-576508, upgrade Safe.pm to version 2.25 or later and ensure you are using Perl version later than 5.10.0.
What versions are affected by REDHAT-BUG-576508?
REDHAT-BUG-576508 affects Safe.pm versions up to 2.24 and Perl versions up to 5.10.0.
What systems are impacted by REDHAT-BUG-576508?
Systems using Safe.pm versions 2.24 and earlier along with Perl versions 5.10.0 and earlier are impacted by REDHAT-BUG-576508.
Are there any workarounds for REDHAT-BUG-576508?
There are no reliable workarounds for REDHAT-BUG-576508; upgrading to the patched versions is the recommended approach.