CVE-2011-3597
NoneCVSS
—
EPSS
13.1%
Published
Jan 13, 2012
CISA due date
—
The record
Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | perl | 0 | 5.12.4-6 |
| Debian:11 | perl | 0 | 5.12.4-6 |
| Debian:12 | perl | 0 | 5.12.4-6 |
| Debian:13 | perl | 0 | 5.12.4-6 |
| Red Hat:enterprise_linux:4::as | perl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::as | perl-debuginfo | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::as | perl-suidperl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::desktop | perl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::desktop | perl-debuginfo | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::desktop | perl-suidperl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::es | perl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::es | perl-debuginfo | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::es | perl-suidperl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::ws | perl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::ws | perl-debuginfo | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:4::ws | perl-suidperl | 0 | 3:5.8.5-57.el4 |
| Red Hat:enterprise_linux:5::client | perl | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:5::client | perl-debuginfo | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:5::client | perl-suidperl | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:5::server | perl | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:5::server | perl-debuginfo | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:5::server | perl-suidperl | 0 | 4:5.8.8-32.el5_7.6 |
| Red Hat:enterprise_linux:6::server | perl | 0 | 4:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Archive-Extract | 0 | 1:0.38-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Archive-Tar | 0 | 0:1.58-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-CGI | 0 | 0:3.51-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-CPAN | 0 | 0:1.9402-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-CPANPLUS | 0 | 0:0.88-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Compress-Raw-Zlib | 0 | 0:2.023-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Compress-Zlib | 0 | 0:2.020-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Digest-SHA | 0 | 1:5.47-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-CBuilder | 0 | 1:0.27-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-Embed | 0 | 0:1.28-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-MakeMaker | 0 | 0:6.55-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-ExtUtils-ParseXS | 0 | 1:2.2003.0-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-File-Fetch | 0 | 0:0.26-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-IO-Compress-Base | 0 | 0:2.020-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-IO-Compress-Zlib | 0 | 0:2.020-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-IO-Zlib | 0 | 1:1.09-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-IPC-Cmd | 0 | 1:0.56-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Locale-Maketext-Simple | 0 | 1:0.18-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Log-Message | 0 | 1:0.02-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Log-Message-Simple | 0 | 0:0.04-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-Build | 0 | 1:0.3500-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-CoreList | 0 | 0:2.18-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-Load | 0 | 1:0.16-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-Load-Conditional | 0 | 0:0.30-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-Loaded | 0 | 1:0.02-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Module-Pluggable | 0 | 1:3.90-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Object-Accessor | 0 | 1:0.34-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Package-Constants | 0 | 1:0.02-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Params-Check | 0 | 1:0.26-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Parse-CPAN-Meta | 0 | 1:1.40-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Pod-Escapes | 0 | 1:1.04-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Pod-Simple | 0 | 1:3.13-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Term-UI | 0 | 0:0.20-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Test-Harness | 0 | 0:3.17-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Test-Simple | 0 | 0:0.92-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Time-HiRes | 0 | 4:1.9721-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-Time-Piece | 0 | 0:1.15-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-core | 0 | 0:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-debuginfo | 0 | 4:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-devel | 0 | 4:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-libs | 0 | 4:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-parent | 0 | 1:0.221-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-suidperl | 0 | 4:5.10.1-119.el6_1.1 |
| Red Hat:enterprise_linux:6::server | perl-version | 0 | 3:0.77-119.el6_1.1 |
Related vulnerabilities
- CVE-2011-1487 The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and… Also affects perl
- CVE-2020-16156 CPAN 2.28 allows Signature Verification Bypass. Also affects perl
- CVE-2017-12837 Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before… Also affects perl
- CVE-2015-8853 The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl… Also affects perl
- CVE-2013-7422 Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5… Also affects perl
- CVE-2012-6329 The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl… Also affects perl
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20