CVE-2015-8608 The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter...
CriticalCVSS 9.8
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| perl | = 5.22 | No fix listed |
References
- www.oracle.com
- packetstormsecurity.com exploit third-party-advisory
- rt.perl.org exploit issue-tracking patch vendor-advisory
- www.oracle.com
- Debian Security Tracker CVE-2015-8608 vendor-advisory