Most recent entries from all

ALSA-2025:9517 — Important: perl-File-Find-Rule security update

Affected: AlmaLinux:9: perl-File-Find-Rule

File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories.

Security Fix(es):

* perl-file-find-rule: File::Find::Rule Arbitrary Code Execution (CVE-2011-10007)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-12301

EUVD-2026-243761

fkie_cve-2011-10007

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.

A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.

Example:

$ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)

GHSA-cvg9-q978-4569

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.

A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.

Example:

$ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)

OESA-2025-1646 — perl-File-Find-Rule security update

Affected: openEuler:22.03-LTS-SP4: perl-File-Find-Rule

File::Find::Rule is a friendlier interface to File::Find. It allows you to build rules which specify the desired files and directories. Security Fix(es):

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename.

A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed.

Example:

$ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)(CVE-2011-10007)

openSUSE-SU-2025:15260-1 — perl-File-Find-Rule-0.350.0-1.1 on GA media

perl-File-Find-Rule-0.350.0-1.1 on GA media

RHSA-2025:9658 — Red Hat Security Advisory: perl-File-Find-Rule security update

perl-file-find-rule: File::Find::Rule Arbitrary Code Execution

UBUNTU-CVE-2011-10007

Affected: Ubuntu:16.04:LTS: libfile-find-rule-perl, Ubuntu:18.04:LTS: libfile-find-rule-perl, Ubuntu:20.04:LTS: libfile-find-rule-perl, Ubuntu:22.04:LTS: libfile-find-rule-perl, Ubuntu:24.04:LTS: libfile-find-rule-perl

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule \ -E 'File::Find::Rule->grep("foo")->in("/tmp/poc")' uid=1000(user) gid=1000(user) groups=1000(user),100(users)

WID-SEC-W-2025-1393 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Codeausführung

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen.