Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Ubuntu 12.04 ESM: USN-3625-2 Moderate: Perl Denial Of Service Risk

ubuntu
Calendar Grey April 17, 2018
Scroller Ubuntu
Several vulnerabilities identified in Perl on Ubuntu 12.04 ESM necessitate urgent upgrades to improve safeguarding.
Several security issues were fixed in Perl.

Summary

Several security issues were fixed in Perl.

Software Description:

- perl: Practical Extraction and Report Language

Details:

USN-3625-1 fixed a vulnerability in Perl. This update provides

the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

 It was discovered that Perl incorrectly handled certain regular

 expressions. An attacker could possibly use this issue to cause Perl

 to hang, resulting in a denial of service. (CVE-2015-8853)

 It was discovered that Perl incorrectly loaded libraries from the

 current working directory. A local attacker could possibly use this

 issue to execute arbitrary code. (CVE-2016-6185)

 It was discovered that Perl incorrectly handled the rmtree and

 remove_tree functions. A local attacker could possibly use this issue

 to set the mode on arbitrary files. (CVE-2017-6512)

 GwanYeong Kim discovered that Perl incorrectly handled certain data

 when using the pack function. An attacker could use...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate denial of service software update code execution Ubuntu Perl

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  perl                            5.14.2-6ubuntu2.7

In general, a standard system update will make all the necessary
changes.

References

  https://ubuntu.com/security/notices/USN-3625-2

  https://ubuntu.com/security/notices/USN-3625-1

  CVE-2015-8853, CVE-2016-6185, CVE-2017-6512, CVE-2018-6913

April 17, 2018

Topics%20covered

Topics Covered

security advisory moderate denial of service software update code execution Ubuntu Perl

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.