CVE-2015-8608: perl Out-of-bounds Read
Vulnerability summary
CVE-2015-8608 is a critical (CVSS 9.8) Out-of-bounds Read vulnerability in perl. EPSS estimates a 4.62% chance of exploitation in the next 30 days, higher than 91.6% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 07-02-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.62%
Chance of exploitation in the next 30 days
Percentile
92%
Versus all other CVEs
30-day change
+0.37 pp
From 4.26% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (rt.perl.org)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Perl1 product
- perl5.22
1 vendor · 1 product
References
4 links- www.oracle.com/security-alerts/cpujul2020.htmlX Refsource MISC
- www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlX Refsource CONFIRM
- rt.perl.org/Public/Bug/Display.html?id=126755X Refsource CONFIRMExploitIssue TrackingPatchVendor Advisory