CVE-2023-31484

Note

the fix released to cpanpm (commit 9c98370) can be applied to the perl
codebase to fix the issue. The perl upstream has fixed the issue through
commit 96ea0b9b, which is actually an import of CPAN v2.36.

Package	Release	Status
perl Launchpad, Ubuntu, Debian	bionic	Released (5.26.1-6ubuntu0.7)
	focal	Released (5.30.0-9ubuntu0.4)
	jammy	Released (5.34.0-3ubuntu1.2)
	kinetic	Released (5.34.0-5ubuntu1.2)
	lunar	Released (5.36.0-7ubuntu0.23.04.1)
	trusty	Released (5.18.2-2ubuntu1.7+esm5) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	upstream	Released (5.38.0)
	xenial	Released (5.22.1-9ubuntu0.9+esm2) Available with Ubuntu Pro or Ubuntu Pro (Infra-only)
	Patches: upstream: https://github.com/Perl/perl5/commit/96ea0b9b6169d72ff9a79b49e89d58bbf4f61620

Parameter	Value
Base score	8.1
Attack vector	Network
Attack complexity	High
Privileges required	None
User interaction	None
Scope	Unchanged
Confidentiality	High
Integrity impact	High
Availability impact	High
Vector	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE-2023-31484

Notes

Priority

Cvss 3 Severity Score

Status

Severity score breakdown

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Further reading