SUSE update for perl
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 4 |
| CVE-ID | CVE-2017-6512 CVE-2018-6798 CVE-2018-6913 CVE-2023-31484 |
| CWE-ID | CWE-362 CWE-119 CWE-122 CWE-295 |
| Exploitation vector | Local network |
| Public exploit | N/A |
| Vulnerable software |
SUSE Linux Enterprise Server for SAP Applications 15 Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 SP2 LTSS Operating systems & Components / Operating system SUSE Linux Enterprise Server 15 Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing 15 Operating systems & Components / Operating system perl-base-32bit-debuginfo Operating systems & Components / Operating system package or component perl-base-32bit Operating systems & Components / Operating system package or component perl-32bit-debuginfo Operating systems & Components / Operating system package or component perl-doc Operating systems & Components / Operating system package or component perl-debugsource Operating systems & Components / Operating system package or component perl-base-debuginfo Operating systems & Components / Operating system package or component perl Operating systems & Components / Operating system package or component perl-debuginfo Operating systems & Components / Operating system package or component perl-base Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 4 vulnerabilities.
1) Race condition
EUVDB-ID: #VU6900
Risk: Low
CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2017-6512
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass certain security restrictions.
the vulnerability exists due to a race condition in rmtree() and remove_tree() functions within the File-Path module for Perl. A local user can set a mode on arbitrary files via vectors involving directory-permission loosening logic.
Successful exploitation of the vulnerability may allow an attacker to escalate privileges on the system.
Update the affected package perl to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP2
SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise Server 15: SP2
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise High Performance Computing 15: SP2
perl-base-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-base-32bit: before 5.26.1-150000.7.18.1
perl-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-doc: before 5.26.1-150000.7.18.1
perl-debugsource: before 5.26.1-150000.7.18.1
perl-base-debuginfo: before 5.26.1-150000.7.18.1
perl: before 5.26.1-150000.7.18.1
perl-debuginfo: before 5.26.1-150000.7.18.1
perl-base: before 5.26.1-150000.7.18.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:perl-base-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20241630-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Heap-based buffer over-read
EUVDB-ID: #VU11834
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2018-6798
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to obtain potentially sensitive information or execute arbitrary code on the target system.
The weakness exists due to heap-based buffer over-read. A local attacker can exploit a specially crafted locale dependent regular expression, trigger memory corruption and gain access to potentially sensitive information or run Perl code.
Successful exploitation of the vulnerability may result in system compromise.
Update the affected package perl to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP2
SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise Server 15: SP2
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise High Performance Computing 15: SP2
perl-base-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-base-32bit: before 5.26.1-150000.7.18.1
perl-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-doc: before 5.26.1-150000.7.18.1
perl-debugsource: before 5.26.1-150000.7.18.1
perl-base-debuginfo: before 5.26.1-150000.7.18.1
perl: before 5.26.1-150000.7.18.1
perl-debuginfo: before 5.26.1-150000.7.18.1
perl-base: before 5.26.1-150000.7.18.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:perl-base-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20241630-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Heap-based buffer overflow
EUVDB-ID: #VU11835
Risk: Low
CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2018-6913
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to cause DoS condition or execute arbitrary code on the target system.
The weakness exists due to heap-based buffer overflow. A local attacker can exploit a specially crafted pack() function, trigger memory corruption and cause the service to crash or run Perl code.
Successful exploitation of the vulnerability may result in system compromise.
Update the affected package perl to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP2
SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise Server 15: SP2
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise High Performance Computing 15: SP2
perl-base-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-base-32bit: before 5.26.1-150000.7.18.1
perl-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-doc: before 5.26.1-150000.7.18.1
perl-debugsource: before 5.26.1-150000.7.18.1
perl-base-debuginfo: before 5.26.1-150000.7.18.1
perl: before 5.26.1-150000.7.18.1
perl-debuginfo: before 5.26.1-150000.7.18.1
perl-base: before 5.26.1-150000.7.18.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:perl-base-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20241630-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Improper Certificate Validation
EUVDB-ID: #VU75604
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-31484
CWE-ID:
CWE-295 - Improper Certificate Validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to missing verification of the TLS certificate when downloading distributions. A remote attacker can perform MitM attack and trick the application into downloading a malicious file.
Update the affected package perl to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Server for SAP Applications 15: SP2
SUSE Linux Enterprise Server 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise Server 15: SP2
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS: 15-SP2
SUSE Linux Enterprise High Performance Computing 15: SP2
perl-base-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-base-32bit: before 5.26.1-150000.7.18.1
perl-32bit-debuginfo: before 5.26.1-150000.7.18.1
perl-doc: before 5.26.1-150000.7.18.1
perl-debugsource: before 5.26.1-150000.7.18.1
perl-base-debuginfo: before 5.26.1-150000.7.18.1
perl: before 5.26.1-150000.7.18.1
perl-debuginfo: before 5.26.1-150000.7.18.1
perl-base: before 5.26.1-150000.7.18.1
CPE2.3- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15_sp2_ltss:15-SP2:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP2:*:*:*:*:*:*:*
- cpe:2.3:a:suse:perl-base-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-32bit-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-doc:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:perl-base:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2024/suse-su-20241630-1/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
