CVEvulnerability

CVE-2016-2381

7.5 HIGH Published 2016-04-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-04-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Affected configurations

• perl perl (< 5.23.9) • debian debian linux 7.0 • debian debian linux 8.0 • oracle communications billing and revenue management 7.5 • oracle configuration manager (< 12.1.2.0.4) • oracle configuration manager 12.1.2.0.6 • oracle database server 11.2.0.4 • oracle database server 12.1.0.2 • oracle database server 12.2.0.1 • oracle database server 18c • oracle database server 19c • oracle enterprise manager base platform 13.2.0.0.0 • oracle enterprise manager base platform 13.3.0.0.0 • oracle timesten in-memory database (< 18.1.2.1.0) • oracle solaris 11.3 • opensuse opensuse 13.2 • canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References