Description

Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Remediation

References

CVE-2016-2381

Related Vulnerabilities

Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-19205)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-8383)

WordPress Plugin Universal Star Rating Unspecified Vulnerability (1.10.3)

WordPress Plugin Contact Form by Supsystic Cross-Site Scripting (1.7.19)

WordPress Plugin UpdraftPlus WordPress Backup Privilege Escalation (1.23.2)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2016-2381