CVE-2017-6512 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 80%

Affected Products (NVD)

Vendor	Product	Version
file\	\	𝑥 < 2.13
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.10
debian	debian_linux	8.0
debian	debian_linux	9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

perl

bookworm	5.36.0-7+deb12u1 fixed
bullseye	5.32.1-4+deb11u3 fixed
bullseye (security)	5.32.1-4+deb11u4 fixed
sid	5.40.0-6 fixed
trixie	5.40.0-6 fixed

Ubuntu Releases

Ubuntu Product

Codename

perl

artful	not-affected
trusty	Fixed 5.18.2-2ubuntu1.4 released
xenial	Fixed 5.22.1-9ubuntu0.3 released
yakkety	ignored
zesty	ignored

openSUSE / SLES Releases

openSUSE Product

Release

perl

suse enterprise desktop 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise sap 12 SP2	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP3	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP5	5.18.2-12.20.1 fixed
suse enterprise sap 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise server 12 SP2	5.18.2-12.3.1 fixed
suse enterprise server 12 SP3	5.18.2-12.3.1 fixed
suse enterprise server 12 SP5	5.18.2-12.20.1 fixed
suse enterprise server 15 SP2	5.26.1-150000.7.18.1 fixed
suse enterprise server 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP7	5.26.1-150300.17.11.1 fixed

perl-32bit

suse enterprise sap 12 SP2	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP3	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP5	5.18.2-12.20.1 fixed
suse enterprise server 12 SP2	5.18.2-12.3.1 fixed
suse enterprise server 12 SP3	5.18.2-12.3.1 fixed
suse enterprise server 12 SP5	5.18.2-12.20.1 fixed

perl-File-Path

suse enterprise desktop 15 SP4	2.150000-1.22 fixed
suse enterprise desktop 15 SP5	2.150000-1.22 fixed
suse enterprise desktop 15 SP6	2.150000-1.22 fixed
suse enterprise desktop 15 SP7	2.150000-1.22 fixed
suse enterprise sap 12 SP5	2.150000-8.3.1 fixed
suse enterprise sap 15 SP4	2.150000-1.22 fixed
suse enterprise sap 15 SP5	2.150000-1.22 fixed
suse enterprise sap 15 SP6	2.150000-1.22 fixed
suse enterprise sap 15 SP7	2.150000-1.22 fixed
suse enterprise server 12 SP5	2.150000-8.3.1 fixed
suse enterprise server 15 SP4	2.150000-1.22 fixed
suse enterprise server 15 SP5	2.150000-1.22 fixed
suse enterprise server 15 SP6	2.150000-1.22 fixed
suse enterprise server 15 SP7	2.150000-1.22 fixed

perl-base

suse enterprise desktop 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise sap 12 SP2	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP3	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP5	5.18.2-12.20.1 fixed
suse enterprise sap 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise server 12 SP2	5.18.2-12.3.1 fixed
suse enterprise server 12 SP3	5.18.2-12.3.1 fixed
suse enterprise server 12 SP5	5.18.2-12.20.1 fixed
suse enterprise server 15 SP2	5.26.1-150000.7.18.1 fixed
suse enterprise server 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP7	5.26.1-150300.17.11.1 fixed

perl-base-32bit

suse enterprise desktop 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP2	5.26.1-150000.7.18.1 fixed
suse enterprise server 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP7	5.26.1-150300.17.11.1 fixed

perl-core-DB_File

suse enterprise desktop 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise desktop 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise sap 15 SP7	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP3	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP4	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP5	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP6	5.26.1-150300.17.11.1 fixed
suse enterprise server 15 SP7	5.26.1-150300.17.11.1 fixed

perl-doc

suse enterprise sap 12 SP2	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP3	5.18.2-12.3.1 fixed
suse enterprise sap 12 SP5	5.18.2-12.20.1 fixed
suse enterprise server 12 SP2	5.18.2-12.3.1 fixed
suse enterprise server 12 SP3	5.18.2-12.3.1 fixed
suse enterprise server 12 SP5	5.18.2-12.20.1 fixed
suse enterprise server 15 SP2	5.26.1-150000.7.18.1 fixed
suse enterprise server 15 SP4	5.26.1-150300.17.11.1 fixed

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes

http://security.cucumberlinux.com/security/details.php?id=153

http://www.debian.org/security/2017/dsa-3873

http://www.securityfocus.com/bid/99180

http://www.securitytracker.com/id/1038610

https://rt.cpan.org/Ticket/Display.html?id=121951

https://security.gentoo.org/glsa/201709-12

https://usn.ubuntu.com/3625-1/

https://usn.ubuntu.com/3625-2/

http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes

http://security.cucumberlinux.com/security/details.php?id=153

http://www.debian.org/security/2017/dsa-3873

http://www.securityfocus.com/bid/99180

http://www.securitytracker.com/id/1038610

https://rt.cpan.org/Ticket/Display.html?id=121951

https://security.gentoo.org/glsa/201709-12

https://usn.ubuntu.com/3625-1/

https://usn.ubuntu.com/3625-2/