CVE-2010-1168

描述

The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving implicitly called methods and implicitly blessed objects, as demonstrated by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."

如何修補 CVE-2010-1168

要修補 CVE-2010-1168,請將受影響套件升級到下列已修補版本。

• Debian/perl—升級至 5.10.1-13 或更新版本

CVE-2010-1168 正在被利用嗎?

低 — EPSS 為 3.7%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 5.10.1-13

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2010-1168