CVE-2011-1487
NoneCVSS
—
EPSS
10.6%
Published
Apr 11, 2011
CISA due date
—
The record
The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | perl | 0 | 5.10.1-20 |
| Debian:11 | perl | 0 | 5.10.1-20 |
| Debian:12 | perl | 0 | 5.10.1-20 |
| Debian:13 | perl | 0 | 5.10.1-20 |
| Debian:5.0 | perl | 0 | 5.10.0-19lenny4 |
| Debian:6.0 | perl | 0 | 5.10.1-17squeeze1 |
| Red Hat:enterprise_linux:6::client | perl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Archive-Extract | 0 | 1:0.38-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Archive-Tar | 0 | 0:1.58-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-CGI | 0 | 0:3.51-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-CPAN | 0 | 0:1.9402-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-CPANPLUS | 0 | 0:0.88-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Compress-Raw-Zlib | 0 | 0:2.023-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Digest-SHA | 0 | 1:5.47-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-ExtUtils-CBuilder | 0 | 1:0.27-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-ExtUtils-Embed | 0 | 0:1.28-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-ExtUtils-MakeMaker | 0 | 0:6.55-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-ExtUtils-ParseXS | 0 | 1:2.2003.0-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-File-Fetch | 0 | 0:0.26-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-IO-Compress-Base | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-IO-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-IO-Zlib | 0 | 1:1.09-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-IPC-Cmd | 0 | 1:0.56-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Locale-Maketext-Simple | 0 | 1:0.18-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Log-Message | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Log-Message-Simple | 0 | 0:0.04-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-Build | 0 | 1:0.3500-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-CoreList | 0 | 0:2.18-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-Load | 0 | 1:0.16-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-Load-Conditional | 0 | 0:0.30-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-Loaded | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Module-Pluggable | 0 | 1:3.90-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Object-Accessor | 0 | 1:0.34-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Package-Constants | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Params-Check | 0 | 1:0.26-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Parse-CPAN-Meta | 0 | 1:1.40-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Pod-Escapes | 0 | 1:1.04-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Pod-Simple | 0 | 1:3.13-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Term-UI | 0 | 0:0.20-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Test-Harness | 0 | 0:3.17-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Test-Simple | 0 | 0:0.92-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Time-HiRes | 0 | 4:1.9721-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-Time-Piece | 0 | 0:1.15-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-core | 0 | 0:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-debuginfo | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-devel | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-libs | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-parent | 0 | 1:0.221-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-suidperl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::client | perl-version | 0 | 3:0.77-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Archive-Extract | 0 | 1:0.38-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Archive-Tar | 0 | 0:1.58-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-CGI | 0 | 0:3.51-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-CPAN | 0 | 0:1.9402-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-CPANPLUS | 0 | 0:0.88-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Compress-Raw-Zlib | 0 | 0:2.023-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Digest-SHA | 0 | 1:5.47-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-ExtUtils-CBuilder | 0 | 1:0.27-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-ExtUtils-Embed | 0 | 0:1.28-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-ExtUtils-MakeMaker | 0 | 0:6.55-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-ExtUtils-ParseXS | 0 | 1:2.2003.0-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-File-Fetch | 0 | 0:0.26-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-IO-Compress-Base | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-IO-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-IO-Zlib | 0 | 1:1.09-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-IPC-Cmd | 0 | 1:0.56-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Locale-Maketext-Simple | 0 | 1:0.18-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Log-Message | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Log-Message-Simple | 0 | 0:0.04-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-Build | 0 | 1:0.3500-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-CoreList | 0 | 0:2.18-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-Load | 0 | 1:0.16-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-Load-Conditional | 0 | 0:0.30-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-Loaded | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Module-Pluggable | 0 | 1:3.90-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Object-Accessor | 0 | 1:0.34-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Package-Constants | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Params-Check | 0 | 1:0.26-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Parse-CPAN-Meta | 0 | 1:1.40-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Pod-Escapes | 0 | 1:1.04-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Pod-Simple | 0 | 1:3.13-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Term-UI | 0 | 0:0.20-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Test-Harness | 0 | 0:3.17-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Test-Simple | 0 | 0:0.92-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Time-HiRes | 0 | 4:1.9721-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-Time-Piece | 0 | 0:1.15-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-core | 0 | 0:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-debuginfo | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-devel | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-libs | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-parent | 0 | 1:0.221-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-suidperl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::computenode | perl-version | 0 | 3:0.77-119.el6 |
| Red Hat:enterprise_linux:6::server | perl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Archive-Extract | 0 | 1:0.38-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Archive-Tar | 0 | 0:1.58-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-CGI | 0 | 0:3.51-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-CPAN | 0 | 0:1.9402-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-CPANPLUS | 0 | 0:0.88-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Compress-Raw-Zlib | 0 | 0:2.023-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Digest-SHA | 0 | 1:5.47-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-CBuilder | 0 | 1:0.27-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-Embed | 0 | 0:1.28-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-MakeMaker | 0 | 0:6.55-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-ParseXS | 0 | 1:2.2003.0-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-File-Fetch | 0 | 0:0.26-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-IO-Compress-Base | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-IO-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-IO-Zlib | 0 | 1:1.09-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-IPC-Cmd | 0 | 1:0.56-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Locale-Maketext-Simple | 0 | 1:0.18-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Log-Message | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Log-Message-Simple | 0 | 0:0.04-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-Build | 0 | 1:0.3500-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-CoreList | 0 | 0:2.18-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-Load | 0 | 1:0.16-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-Load-Conditional | 0 | 0:0.30-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-Loaded | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Module-Pluggable | 0 | 1:3.90-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Object-Accessor | 0 | 1:0.34-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Package-Constants | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Params-Check | 0 | 1:0.26-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Parse-CPAN-Meta | 0 | 1:1.40-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Pod-Escapes | 0 | 1:1.04-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Pod-Simple | 0 | 1:3.13-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Term-UI | 0 | 0:0.20-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Test-Harness | 0 | 0:3.17-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Test-Simple | 0 | 0:0.92-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Time-HiRes | 0 | 4:1.9721-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-Time-Piece | 0 | 0:1.15-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-core | 0 | 0:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-debuginfo | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-devel | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-libs | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-parent | 0 | 1:0.221-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-suidperl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::server | perl-version | 0 | 3:0.77-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Archive-Extract | 0 | 1:0.38-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Archive-Tar | 0 | 0:1.58-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-CGI | 0 | 0:3.51-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-CPAN | 0 | 0:1.9402-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-CPANPLUS | 0 | 0:0.88-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Compress-Raw-Zlib | 0 | 0:2.023-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Digest-SHA | 0 | 1:5.47-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-ExtUtils-CBuilder | 0 | 1:0.27-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-ExtUtils-Embed | 0 | 0:1.28-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-ExtUtils-MakeMaker | 0 | 0:6.55-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-ExtUtils-ParseXS | 0 | 1:2.2003.0-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-File-Fetch | 0 | 0:0.26-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-IO-Compress-Base | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-IO-Compress-Zlib | 0 | 0:2.020-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-IO-Zlib | 0 | 1:1.09-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-IPC-Cmd | 0 | 1:0.56-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Locale-Maketext-Simple | 0 | 1:0.18-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Log-Message | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Log-Message-Simple | 0 | 0:0.04-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-Build | 0 | 1:0.3500-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-CoreList | 0 | 0:2.18-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-Load | 0 | 1:0.16-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-Load-Conditional | 0 | 0:0.30-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-Loaded | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Module-Pluggable | 0 | 1:3.90-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Object-Accessor | 0 | 1:0.34-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Package-Constants | 0 | 1:0.02-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Params-Check | 0 | 1:0.26-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Parse-CPAN-Meta | 0 | 1:1.40-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Pod-Escapes | 0 | 1:1.04-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Pod-Simple | 0 | 1:3.13-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Term-UI | 0 | 0:0.20-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Test-Harness | 0 | 0:3.17-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Test-Simple | 0 | 0:0.92-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Time-HiRes | 0 | 4:1.9721-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-Time-Piece | 0 | 0:1.15-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-core | 0 | 0:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-debuginfo | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-devel | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-libs | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-parent | 0 | 1:0.221-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-suidperl | 0 | 4:5.10.1-119.el6 |
| Red Hat:enterprise_linux:6::workstation | perl-version | 0 | 3:0.77-119.el6 |
Related vulnerabilities
- CVE-2011-3597 Eval injection vulnerability in the Digest module before 1.17 for Perl allows… Also affects perl
- CVE-2020-16156 CPAN 2.28 allows Signature Verification Bypass. Also affects perl
- CVE-2017-12837 Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before… Also affects perl
- CVE-2015-8853 The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl… Also affects perl
- CVE-2013-7422 Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5… Also affects perl
- CVE-2012-6329 The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl… Also affects perl
- CVE-2026-81644 DoS vulnerability in the preview service module. CWE-264
- CVE-2026-49315 DoS vulnerability in the input device module. CWE-264