CVE-2017-6512 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.9 MEDIUM	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 78%

Vendor	Product	Version
file\	\	𝑥 < 2.13
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	17.10
debian	debian_linux	8.0
debian	debian_linux	9.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

perl

bullseye	5.32.1-4+deb11u3 fixed
bullseye (security)	5.32.1-4+deb11u4 fixed
bookworm	5.36.0-7+deb12u1 fixed
sid	5.40.0-6 fixed
trixie	5.40.0-6 fixed

Ubuntu Releases

Ubuntu Product

Codename

perl

artful	not-affected
zesty	ignored
yakkety	ignored
xenial	Fixed 5.22.1-9ubuntu0.3 released
trusty	Fixed 5.18.2-2ubuntu1.4 released

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes

http://security.cucumberlinux.com/security/details.php?id=153

http://www.debian.org/security/2017/dsa-3873

http://www.securityfocus.com/bid/99180

http://www.securitytracker.com/id/1038610

https://rt.cpan.org/Ticket/Display.html?id=121951

https://security.gentoo.org/glsa/201709-12

https://usn.ubuntu.com/3625-1/

https://usn.ubuntu.com/3625-2/

http://cpansearch.perl.org/src/JKEENAN/File-Path-2.13/Changes

http://security.cucumberlinux.com/security/details.php?id=153

http://www.debian.org/security/2017/dsa-3873

http://www.securityfocus.com/bid/99180

http://www.securitytracker.com/id/1038610

https://rt.cpan.org/Ticket/Display.html?id=121951

https://security.gentoo.org/glsa/201709-12

https://usn.ubuntu.com/3625-1/

https://usn.ubuntu.com/3625-2/