Описание
Storable versions before 3.05 for Perl has a stack overflow.
The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
A flaw was found in Storable for Perl. A remote attacker can exploit a vulnerability in the retrieve_hook function by crafting malicious data. This flaw occurs because the function incorrectly handles the length of class names, storing it as a signed integer but processing it as unsigned during read operations. Successful exploitation leads to a stack overflow, which can cause a denial of service.
Отчет
This is an Moderate denial of service flaw in perl-Storable. The vulnerability arises from incorrect handling of class name lengths during deserialization, which can lead to a stack overflow when processing specially crafted data. To exploit this vulnerability the attacker needs to trick the user to use a maliciously crafted data.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | perl-Storable | Not affected | ||
| Red Hat Enterprise Linux 7 | perl-Storable | Fix deferred | ||
| Red Hat Enterprise Linux 8 | perl:5.32/perl-Storable | Not affected | ||
| Red Hat Enterprise Linux 8 | perl-Storable | Not affected | ||
| Red Hat Enterprise Linux 9 | perl-Storable | Not affected | ||
| Red Hat Hardened Images | perl-storable-main-3.37-522.1.hum1 | Fixed | RHSA-2026:7578 | 10.04.2026 |
Показывать по
Ссылки на источники
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
Storable versions before 3.05 for Perl has a stack overflow. The retr ...
6.5 Medium
CVSS3