Description
The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.
References (6)
Core 6
Core References
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q1/62
Patch x_refsource_misc
https://rt.cpan.org/Public/Bug/Display.html?id=90474
Issue Tracking x_refsource_confirm
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1030572
Mailing List mailing-list
x_refsource_mlist
http://seclists.org/oss-sec/2014/q1/56
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1051108
Scores
EPSS
0.0282
EPSS Percentile
84.8%
Details
CWE
CWE-94
Status
published
Products (14)
malcolm_nooning/pirpc
0.2000
malcolm_nooning/pirpc
0.2001
malcolm_nooning/pirpc
0.2002
malcolm_nooning/pirpc
0.2003
malcolm_nooning/pirpc
0.2010
malcolm_nooning/pirpc
0.2011
malcolm_nooning/pirpc
0.2012
malcolm_nooning/pirpc
0.2013
malcolm_nooning/pirpc
0.2014
malcolm_nooning/pirpc
0.2016
... and 4 more
Published
Apr 29, 2014
Tracked Since
Feb 18, 2026