GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

SUSE-SU-2016:2263-1

Vulnerability from csaf_suse - Published: 2016-09-08 09:37 - Updated: 2016-09-08 09:37
Summary
Security update for perl
Severity
Moderate
Notes
Title of the patch: Security update for perl
Description of the patch: This update for Perl fixes the following issues: - CVE-2016-6185: Xsloader looking at a '(eval)' directory. (bsc#988311) - CVE-2016-1238: Searching current directory for optional modules. (bsc#987887) - CVE-2015-8853: Regular expression engine hanging on bad utf8. (bsc) - CVE-2016-2381: Environment dup handling bug. (bsc#967082) - 'Insecure dependency in require' error in taint mode. (bsc#984906) - Memory leak in 'use utf8' handling. (bsc#928292) - Missing lock prototype to the debugger. (bsc#932894)
Patchnames: SUSE-SLE-DESKTOP-12-SP1-2016-1326,SUSE-SLE-SERVER-12-SP1-2016-1326
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
CVE-2015-8853
7.5 (High)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Product Identifier Version Remediation
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64 —
Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch —
Vendor Fix
Threats
Impact moderate
CVE-2016-1238
6.7 (Medium)
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Recommended 22 products, the same list as for CVE-2015-8853
Threats
Impact moderate
CVE-2016-2381
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected products
Recommended 22 products, the same list as for CVE-2015-8853
Threats
Impact moderate
CVE-2016-6185
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Recommended 22 products, the same list as for CVE-2015-8853
Threats
Impact moderate
References
To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for perl",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for Perl fixes the following issues:\n\n- CVE-2016-6185: Xsloader looking at a \u0027(eval)\u0027 directory. (bsc#988311)\n- CVE-2016-1238: Searching current directory for optional modules. (bsc#987887)\n- CVE-2015-8853: Regular expression engine hanging on bad utf8. (bsc)\n- CVE-2016-2381: Environment dup handling bug. (bsc#967082)\n- \u0027Insecure dependency in require\u0027 error in taint mode. (bsc#984906)\n- Memory leak in \u0027use utf8\u0027 handling. (bsc#928292)\n- Missing lock prototype to the debugger. (bsc#932894)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1326,SUSE-SLE-SERVER-12-SP1-2016-1326",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2263-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2263-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162263-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2263-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-September/002262.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 928292",
        "url": "https://bugzilla.suse.com/928292"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 932894",
        "url": "https://bugzilla.suse.com/932894"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 967082",
        "url": "https://bugzilla.suse.com/967082"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 984906",
        "url": "https://bugzilla.suse.com/984906"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 987887",
        "url": "https://bugzilla.suse.com/987887"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 988311",
        "url": "https://bugzilla.suse.com/988311"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8853 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8853/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-1238 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-1238/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2381 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2381/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6185 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6185/"
      }
    ],
    "title": "Security update for perl",
    "tracking": {
      "current_release_date": "2016-09-08T09:37:50Z",
      "generator": {
        "date": "2016-09-08T09:37:50Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2263-1",
      "initial_release_date": "2016-09-08T09:37:50Z",
      "revision_history": [
        {
          "date": "2016-09-08T09:37:50Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-doc-5.18.2-11.1.noarch",
                "product": {
                  "name": "perl-doc-5.18.2-11.1.noarch",
                  "product_id": "perl-doc-5.18.2-11.1.noarch"
                }
              }
            ],
            "category": "architecture",
            "name": "noarch"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-5.18.2-11.1.ppc64le",
                "product": {
                  "name": "perl-5.18.2-11.1.ppc64le",
                  "product_id": "perl-5.18.2-11.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "perl-base-5.18.2-11.1.ppc64le",
                "product": {
                  "name": "perl-base-5.18.2-11.1.ppc64le",
                  "product_id": "perl-base-5.18.2-11.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-5.18.2-11.1.s390x",
                "product": {
                  "name": "perl-5.18.2-11.1.s390x",
                  "product_id": "perl-5.18.2-11.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "perl-32bit-5.18.2-11.1.s390x",
                "product": {
                  "name": "perl-32bit-5.18.2-11.1.s390x",
                  "product_id": "perl-32bit-5.18.2-11.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "perl-base-5.18.2-11.1.s390x",
                "product": {
                  "name": "perl-base-5.18.2-11.1.s390x",
                  "product_id": "perl-base-5.18.2-11.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "perl-5.18.2-11.1.x86_64",
                "product": {
                  "name": "perl-5.18.2-11.1.x86_64",
                  "product_id": "perl-5.18.2-11.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "perl-32bit-5.18.2-11.1.x86_64",
                "product": {
                  "name": "perl-32bit-5.18.2-11.1.x86_64",
                  "product_id": "perl-32bit-5.18.2-11.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "perl-base-5.18.2-11.1.x86_64",
                "product": {
                  "name": "perl-base-5.18.2-11.1.x86_64",
                  "product_id": "perl-base-5.18.2-11.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-32bit-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-32bit-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-base-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-doc-5.18.2-11.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch"
        },
        "product_reference": "perl-doc-5.18.2-11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le"
        },
        "product_reference": "perl-5.18.2-11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-32bit-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-32bit-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-32bit-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-32bit-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le"
        },
        "product_reference": "perl-base-5.18.2-11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-base-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-base-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-doc-5.18.2-11.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch"
        },
        "product_reference": "perl-doc-5.18.2-11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le"
        },
        "product_reference": "perl-5.18.2-11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-32bit-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-32bit-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-32bit-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-32bit-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le"
        },
        "product_reference": "perl-base-5.18.2-11.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x"
        },
        "product_reference": "perl-base-5.18.2-11.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-base-5.18.2-11.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64"
        },
        "product_reference": "perl-base-5.18.2-11.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "perl-doc-5.18.2-11.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
        },
        "product_reference": "perl-doc-5.18.2-11.1.noarch",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8853",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8853"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 data, as demonstrated by \"a\\x80.\"",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8853",
          "url": "https://www.suse.com/security/cve/CVE-2015-8853"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 976584 for CVE-2015-8853",
          "url": "https://bugzilla.suse.com/976584"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 997948 for CVE-2015-8853",
          "url": "https://bugzilla.suse.com/997948"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 997950 for CVE-2015-8853",
          "url": "https://bugzilla.suse.com/997950"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-09-08T09:37:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8853"
    },
    {
      "cve": "CVE-2016-1238",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-1238"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-1238",
          "url": "https://www.suse.com/security/cve/CVE-2016-1238"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1108749 for CVE-2016-1238",
          "url": "https://bugzilla.suse.com/1108749"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1123389 for CVE-2016-1238",
          "url": "https://bugzilla.suse.com/1123389"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 987887 for CVE-2016-1238",
          "url": "https://bugzilla.suse.com/987887"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988311 for CVE-2016-1238",
          "url": "https://bugzilla.suse.com/988311"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-09-08T09:37:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-1238"
    },
    {
      "cve": "CVE-2016-2381",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2381"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2381",
          "url": "https://www.suse.com/security/cve/CVE-2016-2381"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967082 for CVE-2016-2381",
          "url": "https://bugzilla.suse.com/967082"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 992991 for CVE-2016-2381",
          "url": "https://bugzilla.suse.com/992991"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-09-08T09:37:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-2381"
    },
    {
      "cve": "CVE-2016-6185",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6185"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6185",
          "url": "https://www.suse.com/security/cve/CVE-2016-6185"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988311 for CVE-2016-6185",
          "url": "https://bugzilla.suse.com/988311"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 999993 for CVE-2016-6185",
          "url": "https://bugzilla.suse.com/999993"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:perl-doc-5.18.2-11.1.noarch",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-32bit-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.ppc64le",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.s390x",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-base-5.18.2-11.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:perl-doc-5.18.2-11.1.noarch"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-09-08T09:37:50Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6185"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.