CVE-2025-40909: perl Untrusted Search Path

CVSS: 5.9v3.1MediumDeferred

AliasesSUSE-SU-2025:02027-1SUSE-SU-2025:02051-1SUSE-SU-2025:20456-1+12 more

Published 30-05-2025Last modified 18-04-2026

Vulnerability summary

CVE-2025-40909 is a medium (CVSS 5.9) Untrusted Search Path vulnerability in perl. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 42.1% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

34/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.9/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.50%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 3 · Related 2

MGASA-2025-0274 RHSA-2026:50262 SUSE-SU-2025:20532-1 CGA-4XP6-VH7G-MFPP

Timeline

30-05-2025
PublishedVulnerability first disclosed.
18-04-2026
Last modifiedVulnerability information updated.

Description

Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the new thread, which is visible from any third (or more) thread already running. This may lead to unintended operations such as loading code or accessing files from unexpected locations, which a local attacker may be able to exploit. The bug was introduced in commit 11a11ecf4bea72b17d250cfb43c897be1341861e and released in Perl version 5.13.6

CVSS metrics

7 scores · 7 sources · 1 version

v3.15.9

EPSS trend

Probability

0.50%

Chance of exploitation in the next 30 days

Percentile

42%

Versus all other CVEs

30-day change

0.00 pp

From 0.50% on 21-09-2026

21-09-202621-10-2026

EPSS score

0.50%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Redhat193 products

perl< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-Algorithm-Diff< 0:1.1903-10.module+el8.6.0+13324+628a2397 | < 0:1.1903-10.module+el8.10.0+21354+3ad137bb
perl-Archive-Tar< 0:2.38-3.module+el8.6.0+13324+628a2397 | < 0:2.38-3.module+el8.10.0+21354+3ad137bb
perl-Archive-Zip< 0:1.68-3.module+el8.6.0+13324+628a2397 | < 0:1.68-3.module+el8.10.0+21354+3ad137bb
perl-Attribute-Handlers< 0:1.01-481.el9_4.1 | < 0:1.01-481.1.el9_6 | < 0:0.99-423.el8_10 | < 0:1.03-512.2.el10_0 | < 0:1.01-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.01-474.module+el8.10.0+24099+8aa2f756

perl-autodie< 0:2.34-1.module+el8.6.0+13324+628a2397 | < 0:2.34-1.module+el8.10.0+21354+3ad137bb
perl-AutoLoader< 0:5.74-481.el9_4.1 | < 0:5.74-481.1.el9_6 | < 0:5.74-512.2.el10_0 | < 0:5.74-471.module+el8.6.0+24484+7827d5b5.1 | < 0:5.74-474.module+el8.10.0+24099+8aa2f756
perl-AutoSplit< 0:5.74-481.el9_4.1 | < 0:5.74-481.1.el9_6 | < 0:5.74-512.2.el10_0 | < 0:5.74-471.module+el8.6.0+24484+7827d5b5.1 | < 0:5.74-474.module+el8.10.0+24099+8aa2f756
perl-autouse< 0:1.11-481.el9_4.1 | < 0:1.11-481.1.el9_6 | < 0:1.11-512.2.el10_0 | < 0:1.11-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.11-474.module+el8.10.0+24099+8aa2f756
perl-B< 0:1.80-481.el9_4.1 | < 0:1.80-481.1.el9_6 | < 0:1.89-512.2.el10_0 | < 0:1.80-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.80-474.module+el8.10.0+24099+8aa2f756
perl-B-debuginfo< 0:1.80-481.el9_4.1 | < 0:1.80-481.1.el9_6 | < 0:1.89-512.2.el10_0 | < 0:1.80-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.80-474.module+el8.10.0+24099+8aa2f756
perl-base< 0:2.27-481.el9_4.1 | < 0:2.27-481.1.el9_6 | < 0:2.27-512.2.el10_0 | < 0:2.27-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.27-474.module+el8.10.0+24099+8aa2f756
perl-Benchmark< 0:1.23-481.el9_4.1 | < 0:1.23-481.1.el9_6 | < 0:1.25-512.2.el10_0 | < 0:1.23-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.23-474.module+el8.10.0+24099+8aa2f756
perl-bignum< 0:0.51-439.module+el8.6.0+13324+628a2397 | < 0:0.51-439.module+el8.10.0+21354+3ad137bb
perl-blib< 0:1.07-481.el9_4.1 | < 0:1.07-481.1.el9_6 | < 0:1.07-512.2.el10_0 | < 0:1.07-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.07-474.module+el8.10.0+24099+8aa2f756
perl-Carp< 0:1.50-439.module+el8.6.0+13324+628a2397 | < 0:1.50-439.module+el8.10.0+21354+3ad137bb
perl-Class-Struct< 0:0.66-481.el9_4.1 | < 0:0.66-481.1.el9_6 | < 0:0.68-512.2.el10_0 | < 0:0.66-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.66-474.module+el8.10.0+24099+8aa2f756
perl-Compress-Bzip2< 0:2.28-2.module+el8.6.0+13324+628a2397 | < 0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Bzip2-debuginfo< 0:2.28-2.module+el8.6.0+13324+628a2397 | < 0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Bzip2-debugsource< 0:2.28-2.module+el8.6.0+13324+628a2397 | < 0:2.28-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2-debuginfo< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Bzip2-debugsource< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma-debuginfo< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Lzma-debugsource< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib-debuginfo< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Compress-Raw-Zlib-debugsource< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-2.module+el8.10.0+21354+3ad137bb
perl-Config-Extensions< 0:0.03-481.el9_4.1 | < 0:0.03-481.1.el9_6 | < 0:0.03-512.2.el10_0 | < 0:0.03-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.03-474.module+el8.10.0+24099+8aa2f756
perl-Config-Perl-V< 0:0.32-441.module+el8.6.0+13324+628a2397 | < 0:0.32-441.module+el8.10.0+21354+3ad137bb
perl-constant< 0:1.33-1001.module+el8.6.0+13324+628a2397 | < 0:1.33-1001.module+el8.10.0+21354+3ad137bb
perl-CPAN< 0:2.28-5.module+el8.6.0+13324+628a2397 | < 0:2.28-5.module+el8.10.0+21354+3ad137bb
perl-CPAN-DistnameInfo< 0:0.12-13.module+el8.6.0+13324+628a2397 | < 0:0.12-13.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta< 0:2.150010-397.module+el8.6.0+13324+628a2397 | < 0:2.150010-397.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta-Requirements< 0:2.140-397.module+el8.6.0+13324+628a2397 | < 0:2.140-397.module+el8.10.0+21354+3ad137bb
perl-CPAN-Meta-YAML< 0:0.018-1001.module+el8.6.0+13324+628a2397 | < 0:0.018-1001.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper< 0:2.174-440.module+el8.6.0+13324+628a2397 | < 0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper-debuginfo< 0:2.174-440.module+el8.6.0+13324+628a2397 | < 0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-Dumper-debugsource< 0:2.174-440.module+el8.6.0+13324+628a2397 | < 0:2.174-440.module+el8.10.0+21354+3ad137bb
perl-Data-OptList< 0:0.110-7.module+el8.6.0+13324+628a2397 | < 0:0.110-7.module+el8.10.0+21354+3ad137bb
perl-Data-Section< 0:0.200007-8.module+el8.6.0+13324+628a2397 | < 0:0.200007-8.module+el8.10.0+21354+3ad137bb
perl-DB_File< 0:1.855-1.module+el8.6.0+13324+628a2397 | < 0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-DB_File-debuginfo< 0:1.855-1.module+el8.6.0+13324+628a2397 | < 0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-DB_File-debugsource< 0:1.855-1.module+el8.6.0+13324+628a2397 | < 0:1.855-1.module+el8.10.0+21354+3ad137bb
perl-DBM_Filter< 0:0.06-481.el9_4.1 | < 0:0.06-481.1.el9_6 | < 0:0.06-512.2.el10_0 | < 0:0.06-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.06-474.module+el8.10.0+24099+8aa2f756
perl-debugger< 0:1.56-481.el9_4.1 | < 0:1.56-481.1.el9_6 | < 0:1.60-512.2.el10_0 | < 0:1.56-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.56-474.module+el8.10.0+24099+8aa2f756
perl-debuginfo< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-debugsource< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-deprecate< 0:0.04-481.el9_4.1 | < 0:0.04-481.1.el9_6 | < 0:0.04-512.2.el10_0 | < 0:0.04-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.04-474.module+el8.10.0+24099+8aa2f756
perl-devel< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-Devel-Peek< 0:1.28-481.el9_4.1 | < 0:1.28-481.1.el9_6 | < 0:1.26-423.el8_10 | < 0:1.34-512.2.el10_0 | < 0:1.28-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.28-474.module+el8.10.0+24099+8aa2f756
perl-Devel-Peek-debuginfo< 0:1.28-481.el9_4.1 | < 0:1.28-481.1.el9_6 | < 0:1.26-423.el8_10 | < 0:1.34-512.2.el10_0 | < 0:1.28-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.28-474.module+el8.10.0+24099+8aa2f756
perl-Devel-PPPort< 0:3.62-1.module+el8.6.0+13324+628a2397 | < 0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-PPPort-debuginfo< 0:3.62-1.module+el8.6.0+13324+628a2397 | < 0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-PPPort-debugsource< 0:3.62-1.module+el8.6.0+13324+628a2397 | < 0:3.62-1.module+el8.10.0+21354+3ad137bb
perl-Devel-SelfStubber< 0:1.06-481.el9_4.1 | < 0:1.06-481.1.el9_6 | < 0:1.06-423.el8_10 | < 0:1.06-512.2.el10_0 | < 0:1.06-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.06-474.module+el8.10.0+24099+8aa2f756
perl-Devel-Size< 0:0.83-3.module+el8.6.0+13324+628a2397 | < 0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-Devel-Size-debuginfo< 0:0.83-3.module+el8.6.0+13324+628a2397 | < 0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-Devel-Size-debugsource< 0:0.83-3.module+el8.6.0+13324+628a2397 | < 0:0.83-3.module+el8.10.0+21354+3ad137bb
perl-diagnostics< 0:1.37-481.el9_4.1 | < 0:1.37-481.1.el9_6 | < 0:1.40-512.2.el10_0 | < 0:1.37-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.37-474.module+el8.10.0+24099+8aa2f756
perl-Digest< 0:1.20-1.module+el8.6.0+13324+628a2397 | < 0:1.20-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5< 0:2.58-1.module+el8.6.0+13324+628a2397 | < 0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5-debuginfo< 0:2.58-1.module+el8.6.0+13324+628a2397 | < 0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-MD5-debugsource< 0:2.58-1.module+el8.6.0+13324+628a2397 | < 0:2.58-1.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA< 1:6.02-2.module+el8.6.0+13324+628a2397 | < 1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA-debuginfo< 1:6.02-2.module+el8.6.0+13324+628a2397 | < 1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-Digest-SHA-debugsource< 1:6.02-2.module+el8.6.0+13324+628a2397 | < 1:6.02-2.module+el8.10.0+21354+3ad137bb
perl-DirHandle< 0:1.05-481.el9_4.1 | < 0:1.05-481.1.el9_6 | < 0:1.05-512.2.el10_0 | < 0:1.05-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.05-474.module+el8.10.0+24099+8aa2f756
perl-doc< 0:5.32.1-481.el9_4.1 | < 0:5.32.1-481.1.el9_6 | < 0:5.40.2-512.2.el10_0 | < 0:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 0:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-Dumpvalue< 0:2.27-481.el9_4.1 | < 0:2.27-481.1.el9_6 | < 0:2.27-512.2.el10_0 | < 0:2.27-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.27-474.module+el8.10.0+24099+8aa2f756
perl-DynaLoader< 0:1.47-481.el9_4.1 | < 0:1.47-481.1.el9_6 | < 0:1.56-512.2.el10_0 | < 0:1.47-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.47-474.module+el8.10.0+24099+8aa2f756
perl-DynaLoader-debuginfo< 0:1.47-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.47-474.module+el8.10.0+24099+8aa2f756
perl-Encode< 4:3.08-461.module+el8.6.0+13324+628a2397 | < 4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-debuginfo< 4:3.08-461.module+el8.6.0+13324+628a2397 | < 4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-debugsource< 4:3.08-461.module+el8.6.0+13324+628a2397 | < 4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-devel< 4:3.08-461.module+el8.6.0+13324+628a2397 | < 4:3.08-461.module+el8.10.0+21354+3ad137bb
perl-Encode-Locale< 0:1.05-10.module+el8.6.0+13324+628a2397 | < 0:1.05-10.module+el8.10.0+21354+3ad137bb
perl-encoding< 4:3.00-461.module+el8.6.0+13324+628a2397 | < 4:3.00-461.module+el8.10.0+21354+3ad137bb
perl-encoding-warnings< 0:0.13-481.el9_4.1 | < 0:0.13-481.1.el9_6 | < 0:0.14-512.2.el10_0 | < 0:0.13-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.13-474.module+el8.10.0+24099+8aa2f756
perl-English< 0:1.11-481.el9_4.1 | < 0:1.11-481.1.el9_6 | < 0:1.11-512.2.el10_0 | < 0:1.11-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.11-474.module+el8.10.0+24099+8aa2f756
perl-Env< 0:1.04-396.module+el8.6.0+13324+628a2397 | < 0:1.04-396.module+el8.10.0+21354+3ad137bb
perl-Errno< 0:1.30-481.el9_4.1 | < 0:1.30-481.1.el9_6 | < 0:1.28-423.el8_10 | < 0:1.38-512.2.el10_0 | < 0:1.30-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.30-474.module+el8.10.0+24099+8aa2f756
perl-experimental< 0:0.025-1.module+el8.6.0+13324+628a2397 | < 0:0.025-1.module+el8.10.0+21354+3ad137bb
perl-Exporter< 0:5.74-458.module+el8.6.0+13324+628a2397 | < 0:5.74-458.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-CBuilder< 1:0.280236-1.module+el8.6.0+13324+628a2397 | < 1:0.280236-1.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Command< 2:7.46-3.module+el8.6.0+13324+628a2397 | < 2:7.46-3.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Constant< 0:0.25-481.el9_4.1 | < 0:0.25-481.1.el9_6 | < 0:0.25-512.2.el10_0 | < 0:0.25-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.25-474.module+el8.10.0+24099+8aa2f756
perl-ExtUtils-Embed< 0:1.35-481.el9_4.1 | < 0:1.35-481.1.el9_6 | < 0:1.34-423.el8_10 | < 0:1.35-512.2.el10_0 | < 0:1.35-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.35-474.module+el8.10.0+24099+8aa2f756
perl-ExtUtils-Install< 0:2.20-1.module+el8.6.0+13324+628a2397 | < 0:2.20-1.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-MakeMaker< 2:7.46-3.module+el8.6.0+13324+628a2397 | < 2:7.46-3.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Manifest< 1:1.73-1.module+el8.6.0+13324+628a2397 | < 1:1.73-1.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-Miniperl< 0:1.09-481.el9_4.1 | < 0:1.09-481.1.el9_6 | < 0:1.06-423.el8_10 | < 0:1.14-512.2.el10_0 | < 0:1.09-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.09-474.module+el8.10.0+24099+8aa2f756
perl-ExtUtils-MM-Utils< 2:7.46-3.module+el8.6.0+13324+628a2397 | < 2:7.46-3.module+el8.10.0+21354+3ad137bb
perl-ExtUtils-ParseXS< 1:3.40-439.module+el8.6.0+13324+628a2397 | < 1:3.40-439.module+el8.10.0+21354+3ad137bb
perl-Fcntl< 0:1.13-481.el9_4.1 | < 0:1.13-481.1.el9_6 | < 0:1.18-512.2.el10_0 | < 0:1.13-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.13-474.module+el8.10.0+24099+8aa2f756
perl-Fcntl-debuginfo< 0:1.13-481.el9_4.1 | < 0:1.13-481.1.el9_6 | < 0:1.18-512.2.el10_0 | < 0:1.13-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.13-474.module+el8.10.0+24099+8aa2f756
perl-Fedora-VSP< 0:0.001-10.module+el8.6.0+13324+628a2397 | < 0:0.001-10.module+el8.10.0+21354+3ad137bb
perl-fields< 0:2.27-481.el9_4.1 | < 0:2.27-481.1.el9_6 | < 0:2.27-512.2.el10_0 | < 0:2.27-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.27-474.module+el8.10.0+24099+8aa2f756
perl-File-Basename< 0:2.85-481.el9_4.1 | < 0:2.85-481.1.el9_6 | < 0:2.86-512.2.el10_0 | < 0:2.85-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.85-474.module+el8.10.0+24099+8aa2f756
perl-File-Compare< 0:1.100.600-481.el9_4.1 | < 0:1.100.600-481.1.el9_6 | < 0:1.100.800-512.2.el10_0 | < 0:1.100.600-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.100.600-474.module+el8.10.0+24099+8aa2f756
perl-File-Copy< 0:2.34-481.el9_4.1 | < 0:2.34-481.1.el9_6 | < 0:2.41-512.2.el10_0 | < 0:2.34-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.34-474.module+el8.10.0+24099+8aa2f756
perl-File-DosGlob< 0:1.12-481.el9_4.1 | < 0:1.12-481.1.el9_6 | < 0:1.12-512.2.el10_0 | < 0:1.12-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.12-474.module+el8.10.0+24099+8aa2f756
perl-File-DosGlob-debuginfo< 0:1.12-481.el9_4.1 | < 0:1.12-481.1.el9_6 | < 0:1.12-512.2.el10_0 | < 0:1.12-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.12-474.module+el8.10.0+24099+8aa2f756
perl-File-Fetch< 0:1.00-1.module+el8.6.0+13324+628a2397 | < 0:1.00-1.module+el8.10.0+21354+3ad137bb
perl-File-Find< 0:1.37-481.el9_4.1 | < 0:1.37-481.1.el9_6 | < 0:1.44-512.2.el10_0 | < 0:1.37-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.37-474.module+el8.10.0+24099+8aa2f756
perl-File-HomeDir< 0:1.004-6.module+el8.6.0+13324+628a2397 | < 0:1.004-6.module+el8.10.0+21354+3ad137bb
perl-File-Path< 0:2.16-439.module+el8.6.0+13324+628a2397 | < 0:2.16-439.module+el8.10.0+21354+3ad137bb
perl-File-stat< 0:1.09-481.el9_4.1 | < 0:1.09-481.1.el9_6 | < 0:1.14-512.2.el10_0 | < 0:1.09-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.09-474.module+el8.10.0+24099+8aa2f756
perl-File-Temp< 1:0.231.100-1.module+el8.6.0+13324+628a2397 | < 1:0.231.100-1.module+el8.10.0+21354+3ad137bb
perl-File-Which< 0:1.23-4.module+el8.6.0+13324+628a2397 | < 0:1.23-4.module+el8.10.0+21354+3ad137bb
perl-FileCache< 0:1.10-481.el9_4.1 | < 0:1.10-481.1.el9_6 | < 0:1.10-512.2.el10_0 | < 0:1.10-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.10-474.module+el8.10.0+24099+8aa2f756
perl-FileHandle< 0:2.03-481.el9_4.1 | < 0:2.03-481.1.el9_6 | < 0:2.05-512.2.el10_0 | < 0:2.03-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.03-474.module+el8.10.0+24099+8aa2f756
perl-filetest< 0:1.03-481.el9_4.1 | < 0:1.03-481.1.el9_6 | < 0:1.03-512.2.el10_0 | < 0:1.03-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.03-474.module+el8.10.0+24099+8aa2f756
perl-Filter< 2:1.60-1.module+el8.6.0+13324+628a2397 | < 2:1.60-1.module+el8.10.0+21354+3ad137bb
perl-Filter-debuginfo< 2:1.60-1.module+el8.6.0+13324+628a2397 | < 2:1.60-1.module+el8.10.0+21354+3ad137bb
perl-Filter-debugsource< 2:1.60-1.module+el8.6.0+13324+628a2397 | < 2:1.60-1.module+el8.10.0+21354+3ad137bb
perl-Filter-Simple< 0:0.96-457.module+el8.6.0+13324+628a2397 | < 0:0.96-457.module+el8.10.0+21354+3ad137bb
perl-FindBin< 0:1.51-481.el9_4.1 | < 0:1.51-481.1.el9_6 | < 0:1.54-512.2.el10_0 | < 0:1.51-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.51-474.module+el8.10.0+24099+8aa2f756
perl-GDBM_File< 0:1.18-481.el9_4.1 | < 0:1.18-481.1.el9_6 | < 1:1.24-512.2.el10_0 | < 0:1.18-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.18-474.module+el8.10.0+24099+8aa2f756
perl-GDBM_File-debuginfo< 0:1.18-481.el9_4.1 | < 0:1.18-481.1.el9_6 | < 1:1.24-512.2.el10_0 | < 0:1.18-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.18-474.module+el8.10.0+24099+8aa2f756
perl-generators< 0:1.13-1.module+el8.6.0+13324+628a2397 | < 0:1.13-1.module+el8.10.0+21354+3ad137bb
perl-Getopt-Long< 1:2.52-1.module+el8.6.0+13324+628a2397 | < 1:2.52-1.module+el8.10.0+21354+3ad137bb
perl-Getopt-Std< 0:1.12-481.el9_4.1 | < 0:1.12-481.1.el9_6 | < 0:1.14-512.2.el10_0 | < 0:1.12-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.12-474.module+el8.10.0+24099+8aa2f756
perl-Hash-Util< 0:0.23-481.el9_4.1 | < 0:0.23-481.1.el9_6 | < 0:0.32-512.2.el10_0 | < 0:0.23-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.23-474.module+el8.10.0+24099+8aa2f756
perl-Hash-Util-debuginfo< 0:0.23-481.el9_4.1 | < 0:0.23-481.1.el9_6 | < 0:0.32-512.2.el10_0 | < 0:0.23-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.23-474.module+el8.10.0+24099+8aa2f756
perl-Hash-Util-FieldHash< 0:1.20-481.el9_4.1 | < 0:1.20-481.1.el9_6 | < 0:1.27-512.2.el10_0 | < 0:1.20-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.20-474.module+el8.10.0+24099+8aa2f756
perl-Hash-Util-FieldHash-debuginfo< 0:1.20-481.el9_4.1 | < 0:1.20-481.1.el9_6 | < 0:1.27-512.2.el10_0 | < 0:1.20-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.20-474.module+el8.10.0+24099+8aa2f756
perl-homedir< 0:2.000024-7.module+el8.6.0+13324+628a2397 | < 0:2.000024-7.module+el8.10.0+21354+3ad137bb
perl-HTTP-Tiny< 0:0.078-1.module+el8.6.0+13324+628a2397 | < 0:0.078-1.module+el8.10.0+21354+3ad137bb
perl-I18N-Collate< 0:1.02-481.el9_4.1 | < 0:1.02-481.1.el9_6 | < 0:1.02-512.2.el10_0 | < 0:1.02-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.02-474.module+el8.10.0+24099+8aa2f756
perl-I18N-Langinfo< 0:0.19-481.el9_4.1 | < 0:0.19-481.1.el9_6 | < 0:0.24-512.2.el10_0 | < 0:0.19-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.19-474.module+el8.10.0+24099+8aa2f756
perl-I18N-Langinfo-debuginfo< 0:0.19-481.el9_4.1 | < 0:0.19-481.1.el9_6 | < 0:0.24-512.2.el10_0 | < 0:0.19-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.19-474.module+el8.10.0+24099+8aa2f756
perl-I18N-LangTags< 0:0.44-481.el9_4.1 | < 0:0.44-481.1.el9_6 | < 0:0.45-512.2.el10_0 | < 0:0.44-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.44-474.module+el8.10.0+24099+8aa2f756
perl-if< 0:0.60.800-481.el9_4.1 | < 0:0.60.800-481.1.el9_6 | < 0:0.61.000-512.2.el10_0 | < 0:0.60.800-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.60.800-474.module+el8.10.0+24099+8aa2f756
perl-Importer< 0:0.025-6.module+el8.6.0+13324+628a2397 | < 0:0.025-6.module+el8.10.0+21354+3ad137bb
perl-inc-latest< 2:0.500-10.module+el8.6.0+13324+628a2397 | < 2:0.500-10.module+el8.10.0+21354+3ad137bb
perl-interpreter< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-interpreter-debuginfo< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-IO< 0:1.43-481.el9_4.1 | < 0:1.43-481.1.el9_6 | < 0:1.38-423.el8_10 | < 0:1.55-512.2.el10_0 | < 0:1.43-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.43-474.module+el8.10.0+24099+8aa2f756
perl-IO-Compress< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-IO-Compress-Lzma< 0:2.096-1.module+el8.6.0+13324+628a2397 | < 0:2.096-1.module+el8.10.0+21354+3ad137bb
perl-IO-debuginfo< 0:1.43-481.el9_4.1 | < 0:1.43-481.1.el9_6 | < 0:1.38-423.el8_10 | < 0:1.55-512.2.el10_0 | < 0:1.43-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.43-474.module+el8.10.0+24099+8aa2f756
perl-IO-Socket-IP< 0:0.41-2.module+el8.6.0+13324+628a2397 | < 0:0.41-2.module+el8.10.0+21354+3ad137bb
perl-IO-Zlib< 1:1.10-423.el8_10 | < 1:1.10-471.module+el8.6.0+24484+7827d5b5.1 | < 1:1.10-474.module+el8.10.0+24099+8aa2f756
perl-IPC-Cmd< 2:1.04-2.module+el8.6.0+13324+628a2397 | < 2:1.04-2.module+el8.10.0+21354+3ad137bb
perl-IPC-Open3< 0:1.21-481.el9_4.1 | < 0:1.21-481.1.el9_6 | < 0:1.22-512.2.el10_0 | < 0:1.21-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.21-474.module+el8.10.0+24099+8aa2f756
perl-IPC-System-Simple< 0:1.30-3.module+el8.6.0+13324+628a2397 | < 0:1.30-3.module+el8.10.0+21354+3ad137bb
perl-IPC-SysV< 0:2.09-1.module+el8.6.0+13324+628a2397 | < 0:2.09-1.module+el8.10.0+21354+3ad137bb
perl-IPC-SysV-debuginfo< 0:2.09-1.module+el8.6.0+13324+628a2397 | < 0:2.09-1.module+el8.10.0+21354+3ad137bb
perl-IPC-SysV-debugsource< 0:2.09-1.module+el8.6.0+13324+628a2397 | < 0:2.09-1.module+el8.10.0+21354+3ad137bb
perl-JSON-PP< 1:4.04-2.module+el8.6.0+13324+628a2397 | < 1:4.04-2.module+el8.10.0+21354+3ad137bb
perl-less< 0:0.03-481.el9_4.1 | < 0:0.03-481.1.el9_6 | < 0:0.03-512.2.el10_0 | < 0:0.03-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.03-474.module+el8.10.0+24099+8aa2f756
perl-lib< 0:0.65-481.el9_4.1 | < 0:0.65-481.1.el9_6 | < 0:0.65-512.2.el10_0 | < 0:0.65-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.65-474.module+el8.10.0+24099+8aa2f756
perl-libnet< 0:3.13-1.module+el8.6.0+13324+628a2397 | < 0:3.13-1.module+el8.10.0+21354+3ad137bb
perl-libnetcfg< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-libs< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-libs-debuginfo< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-local-lib< 0:2.000024-7.module+el8.6.0+13324+628a2397 | < 0:2.000024-7.module+el8.10.0+21354+3ad137bb
perl-locale< 0:1.09-481.el9_4.1 | < 0:1.09-481.1.el9_6 | < 0:1.12-512.2.el10_0 | < 0:1.09-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.09-474.module+el8.10.0+24099+8aa2f756
perl-Locale-Maketext< 0:1.29-440.module+el8.6.0+13324+628a2397 | < 0:1.29-440.module+el8.10.0+21354+3ad137bb
perl-Locale-Maketext-Simple< 1:0.21-481.el9_4.1 | < 1:0.21-481.1.el9_6 | < 1:0.21-423.el8_10 | < 1:0.21-512.2.el10_0 | < 1:0.21-471.module+el8.6.0+24484+7827d5b5.1 | < 1:0.21-474.module+el8.10.0+24099+8aa2f756
perl-macros< 4:5.32.1-481.el9_4.1 | < 4:5.32.1-481.1.el9_6 | < 4:5.26.3-423.el8_10 | < 4:5.40.2-512.2.el10_0 | < 4:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 4:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-Math-BigInt< 1:1.9998.18-1.module+el8.6.0+13324+628a2397 | < 1:1.9998.18-1.module+el8.10.0+21354+3ad137bb
perl-Math-BigInt-FastCalc< 0:0.500.900-1.module+el8.6.0+13324+628a2397 | < 0:0.500.900-1.module+el8.10.0+21354+3ad137bb
perl-Math-BigInt-FastCalc-debuginfo< 0:0.500.900-1.module+el8.6.0+13324+628a2397 | < 0:0.500.900-1.module+el8.10.0+21354+3ad137bb
perl-Math-BigInt-FastCalc-debugsource< 0:0.500.900-1.module+el8.6.0+13324+628a2397 | < 0:0.500.900-1.module+el8.10.0+21354+3ad137bb
perl-Math-BigRat< 0:0.2614-2.module+el8.6.0+13324+628a2397 | < 0:0.2614-2.module+el8.10.0+21354+3ad137bb
perl-Math-Complex< 0:1.59-481.el9_4.1 | < 0:1.59-481.1.el9_6 | < 0:1.59-423.el8_10 | < 0:1.62-512.2.el10_0 | < 0:1.59-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.59-474.module+el8.10.0+24099+8aa2f756
perl-Memoize< 0:1.03-481.el9_4.1 | < 0:1.03-481.1.el9_6 | < 0:1.03-423.el8_10 | < 0:1.16-512.2.el10_0 | < 0:1.03-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.03-474.module+el8.10.0+24099+8aa2f756
perl-meta-notation< 0:5.32.1-481.el9_4.1 | < 0:5.32.1-481.1.el9_6 | < 0:5.40.2-512.2.el10_0 | < 0:5.32.1-471.module+el8.6.0+24484+7827d5b5.1 | < 0:5.32.1-474.module+el8.10.0+24099+8aa2f756
perl-MIME-Base64< 0:3.15-1001.module+el8.6.0+13324+628a2397 | < 0:3.15-1001.module+el8.10.0+21354+3ad137bb
perl-MIME-Base64-debuginfo< 0:3.15-1001.module+el8.6.0+13324+628a2397 | < 0:3.15-1001.module+el8.10.0+21354+3ad137bb
perl-MIME-Base64-debugsource< 0:3.15-1001.module+el8.6.0+13324+628a2397 | < 0:3.15-1001.module+el8.10.0+21354+3ad137bb
perl-Module-Build< 2:0.42.31-5.module+el8.6.0+13324+628a2397 | < 2:0.42.31-5.module+el8.10.0+21354+3ad137bb
perl-Module-CoreList< 1:5.20211020-1.module+el8.6.0+13324+628a2397 | < 1:5.20211020-1.module+el8.10.0+21354+3ad137bb
perl-Module-CoreList-tools< 1:5.20211020-1.module+el8.6.0+13324+628a2397 | < 1:5.20211020-1.module+el8.10.0+21354+3ad137bb
perl-Module-Load< 1:0.36-1.module+el8.6.0+13324+628a2397 | < 1:0.36-1.module+el8.10.0+21354+3ad137bb
perl-Module-Load-Conditional< 0:0.74-1.module+el8.6.0+13324+628a2397 | < 0:0.74-1.module+el8.10.0+21354+3ad137bb
perl-Module-Loaded< 1:0.08-481.el9_4.1 | < 1:0.08-481.1.el9_6 | < 1:0.08-423.el8_10 | < 1:0.08-512.2.el10_0 | < 1:0.08-471.module+el8.6.0+24484+7827d5b5.1 | < 1:0.08-474.module+el8.10.0+24099+8aa2f756
perl-Module-Metadata< 0:1.000037-1.module+el8.6.0+13324+628a2397 | < 0:1.000037-1.module+el8.10.0+21354+3ad137bb
perl-mro< 0:1.23-481.el9_4.1 | < 0:1.23-481.1.el9_6 | < 0:1.29-512.2.el10_0 | < 0:1.23-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.23-474.module+el8.10.0+24099+8aa2f756
perl-MRO-Compat< 0:0.13-5.module+el8.6.0+13324+628a2397 | < 0:0.13-5.module+el8.10.0+21354+3ad137bb
perl-mro-debuginfo< 0:1.23-481.el9_4.1 | < 0:1.23-481.1.el9_6 | < 0:1.29-512.2.el10_0 | < 0:1.23-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.23-474.module+el8.10.0+24099+8aa2f756
perl-NDBM_File< 0:1.15-481.el9_4.1 | < 0:1.15-481.1.el9_6 | < 0:1.17-512.2.el10_0 | < 0:1.15-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.15-474.module+el8.10.0+24099+8aa2f756
perl-NDBM_File-debuginfo< 0:1.15-481.el9_4.1 | < 0:1.15-481.1.el9_6 | < 0:1.17-512.2.el10_0 | < 0:1.15-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.15-474.module+el8.10.0+24099+8aa2f756
perl-Net< 0:1.02-481.el9_4.1 | < 0:1.02-481.1.el9_6 | < 0:1.04-512.2.el10_0 | < 0:1.02-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.02-474.module+el8.10.0+24099+8aa2f756
perl-Net-Ping< 0:2.55-423.el8_10 | < 0:2.72-471.module+el8.6.0+24484+7827d5b5.1 | < 0:2.72-474.module+el8.10.0+24099+8aa2f756
perl-NEXT< 0:0.67-481.el9_4.1 | < 0:0.67-481.1.el9_6 | < 0:0.69-512.2.el10_0 | < 0:0.67-471.module+el8.6.0+24484+7827d5b5.1 | < 0:0.67-474.module+el8.10.0+24099+8aa2f756
perl-Object-HashBase< 0:0.009-4.module+el8.6.0+13324+628a2397 | < 0:0.009-4.module+el8.10.0+21354+3ad137bb
perl-Object-HashBase-tools< 0:0.009-4.module+el8.6.0+13324+628a2397 | < 0:0.009-4.module+el8.10.0+21354+3ad137bb
perl-ODBM_File< 0:1.16-481.el9_4.1 | < 0:1.16-481.1.el9_6 | < 0:1.18-512.2.el10_0 | < 0:1.16-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.16-474.module+el8.10.0+24099+8aa2f756
perl-ODBM_File-debuginfo< 0:1.16-481.el9_4.1 | < 0:1.16-481.1.el9_6 | < 0:1.18-512.2.el10_0 | < 0:1.16-471.module+el8.6.0+24484+7827d5b5.1 | < 0:1.16-474.module+el8.10.0+24099+8aa2f756

Show all 193

Opensuse2 products

perl&distro=openSUSE Leap 15.6< 5.26.1-150300.17.20.1
perl&distro=openSUSE Tumbleweed< 5.40.2-3.1

Chainguard1 product

perl< 5.40.2-r1

Debian1 product

perl< 5.36.0-7+deb12u3 | < 5.40.1-5

Perl1 product

perl≥ 5.13.6, < 5.41.13

Ubuntu1 product

perlAll versions (No fix recorded) | < 5.34.0-3ubuntu1.5 | < 5.38.2-3.2ubuntu0.2

Wolfi1 product

perl< 5.40.2-r1

7 vendors · 200 products · Showing 200 of 318. Use Open JSON for the complete list.

References

47 links

github.com/Perl/perl5/commit/918bfff86ca8d6d4e4ec5b30994451e0bd74aba9.patchPatchARTICLEFIX
www.openwall.com/lists/oss-security/2025/05/22/2Mailing ListExploitARTICLEEVIDENCE
github.com/Perl/perl5/issues/23010Issue TrackingARTICLEREPORT
bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098226RelatedARTICLEWEB
github.com/Perl/perl5/issues/10387RelatedARTICLEREPORT
perldoc.perl.org/5.14.0/perl5136deltaRelatedARTICLEWEB
github.com/Perl/perl5/commit/11a11ecf4bea72b17d250cfb43c897be1341861eRelatedARTICLEFIX
www.openwall.com/lists/oss-security/2025/05/23/1WEB
www.openwall.com/lists/oss-security/2025/05/30/4WEB
www.openwall.com/lists/oss-security/2025/06/02/2WEB

Show all 47 references

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities