QwikSec

Security Database

CVE

CWE

Training

CVE-2017-0373

Published: May 23, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The gen_class_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dangerous "use lib" line, which allows remote attackers to have an unspecified impact via a crafted Debian package file.

Vendor	Product	Versions
n/a	libconfig-model-perl	affected `libconfig-model-perl`

References

https://anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/?h=stretch&id=e7e5dd1a650939a0e021d1d5b311dbb3c4884773

x_refsource_CONFIRM

http://cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/Changes

x_refsource_CONFIRM

https://security-tracker.debian.org/tracker/CVE-2017-0373

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.