CVE-2011-2728
Last modified
CVE-2011-2728 is a vulnerability of currently unknown severity. The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.. EPSS estimates a 1.40% chance of exploitation in the next 30 days.
Description
The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Perl | Perl | <= 5.14.1 |
| Perl | Perl | 1.00 |
| Perl | Perl | 1.01 |
| Perl | Perl | 1.20 |
| Perl | Perl | 1.21 |
| Perl | Perl | 1.22 |
| Perl | Perl | 1.31 |
| Perl | Perl | 1.32 |
| Perl | Perl | 1.40 |
| Perl | Perl | 1.41 |
| Perl | Perl | 1.42 |
| Perl | Perl | 1.43 |
| Perl | Perl | 1.44 |
| Perl | Perl | 1.45 |
| Perl | Perl | 1.46 |
| Perl | Perl | 1.47 |
| Perl | Perl | 1.48 |
| Perl | Perl | 1.49 |
| Perl | Perl | 2.0.0 |
| Perl | Perl | 2.1.0 |
| Perl | Perl | 2.1.1 |
| Perl | Perl | 2.1.2 |
| Perl | Perl | 2.1.3 |
| Perl | Perl | 2.2.0 |
| Perl | Perl | 2.2.1 |
| Perl | Perl | 2.2.2 |
| Perl | Perl | 2.3.0 |
| Perl | Perl | 2.4.0 |
| Perl | Perl | 2.5.0 |
| Perl | Perl | 2.5.1 |
| Perl | Perl | 2.6.0 |
| Perl | Perl | 2.6.1 |
| Perl | Perl | 2.6.2 |
| Perl | Perl | 2.6.3 |
| Perl | Perl | 2.6.4 |
| Perl | Perl | 2.6.5 |
| Perl | Perl | 2.6.6 |
| Perl | Perl | 2.7.0 |
| Perl | Perl | 2.7.1 |
| Perl | Perl | 2.7.2 |
| Perl | Perl | 2.8.0 |
| Perl | Perl | 2.8.1 |
| Perl | Perl | 2.8.2 |
| Perl | Perl | 2.8.3 |
| Perl | Perl | 2.8.4 |
| Perl | Perl | 2.8.5 |
| Perl | Perl | 2.8.6 |
| Perl | Perl | 2.8.7 |
| Perl | Perl | 2.8.8 |
| Perl | Perl | 2.9.0 |
Showing 50 of 122 affected configurations. See NVD for the full list.
References
- http://secunia.com/advisories/46172Vendor Advisory
- http://secunia.com/advisories/46172Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2728?
How severe is CVE-2011-2728?
How do I fix CVE-2011-2728?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2722The send_data_to_stdout function in prnt/hpijs/hpcupsfax.cpp…
- CVE-2011-2723The skb_gro_header_slow function in include/linux/netdevice.…
- CVE-2011-2724The check_mtab function in client/mount.cifs.c in mount.cifs…
- CVE-2011-2725Directory traversal vulnerability in Ark 4.7.x and earlier a…
- CVE-2011-2726An access bypass issue was found in Drupal 7.x before versio…7.5
- CVE-2011-2727The (1) templatewrap/templatefoot.php, (2) cmsjs/plugin.js.p…
- CVE-2011-2729native/unix/native/jsvc-unix.c in jsvc in the Daemon compone…
- CVE-2011-2730VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5…
- CVE-2011-2731Race condition in the RunAsManager mechanism in VMware Sprin…
- CVE-2011-2732CRLF injection vulnerability in the logout functionality in …
- CVE-2011-2733EMC RSA Adaptive Authentication On-Premise (AAOP) 6.0.2.1 SP…
- CVE-2011-2734Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
Are you affected by CVE-2011-2728?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST