https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 17:58:48 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1067 certfr-2026-avi-1067 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1067 https://cve.radiocsirt.org/vuln/euvd-2026-327702 EUVD-2026-327702 https://cve.radiocsirt.org/vuln/euvd-2026-327702 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12087 <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-12087 https://cve.radiocsirt.org/vuln/ghsa-q5cv-5vf6-95gp <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> https://cve.radiocsirt.org/vuln/ghsa-q5cv-5vf6-95gp https://cve.radiocsirt.org/vuln/msrc_cve-2026-12087 msrc_CVE-2026-12087 https://cve.radiocsirt.org/vuln/msrc_cve-2026-12087 https://cve.radiocsirt.org/vuln/ncsc-2026-0321 NCSC-2026-0321 https://cve.radiocsirt.org/vuln/ncsc-2026-0321 https://cve.radiocsirt.org/vuln/oesa-2026-2843 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: perl</p> <p>Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fix(es):</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.(CVE-2026-12087)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: perl</p> <p>Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fix(es):</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read.</p> <p>In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer.</p> <p>Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.(CVE-2026-12087)</p> https://cve.radiocsirt.org/vuln/oesa-2026-2843 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21411-1 <p>Security update for perl</p> <p>Security update for perl</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:21411-1 https://cve.radiocsirt.org/vuln/rhsa-2026:11342 <p>perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read</p> <p>perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read</p> https://cve.radiocsirt.org/vuln/rhsa-2026:11342 https://cve.radiocsirt.org/vuln/suse-su-2026:22847-1 <p>Security update for perl</p> <p>Security update for perl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22847-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12087 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:16.04:LTS: libsocket-perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:18.04:LTS: libsocket-perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:20.04:LTS: libsocket-perl, Ubuntu:22.04:LTS: libsocket-perl, Ubuntu:22.04:LTS: perl, Ubuntu:24.04:LTS: libsocket-perl and 5 more</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer. Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: perl, Ubuntu:Pro:16.04:LTS: perl, Ubuntu:16.04:LTS: libsocket-perl, Ubuntu:Pro:18.04:LTS: perl, Ubuntu:18.04:LTS: libsocket-perl, Ubuntu:Pro:20.04:LTS: perl, Ubuntu:20.04:LTS: libsocket-perl, Ubuntu:22.04:LTS: libsocket-perl, Ubuntu:22.04:LTS: perl, Ubuntu:24.04:LTS: libsocket-perl and 5 more</p> <p>Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source argument before the argument is read, so the check tests the byte length carried over from the preceding multiaddr argument instead. Both addresses occupy a 4-byte field, so a valid multiaddr lets a source of any length pass the check, and the source is then copied into the 4-byte imr_sourceaddr field with a fixed-size copy. A source shorter than 4 bytes is not rejected, and the copy reads up to 3 bytes past the end of its buffer. Calling pack_ip_mreq_source() with a source value shorter than 4 bytes copies adjacent heap memory into the returned packed structure.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-12087 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2858 <p>Ein Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in IBM AIX und IBM VIOS ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um Dateien zu manipulieren, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2858