CVE-2021-36770

EUVD-2021-23358
Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator evaluates @INC in a scalar context, and thus @INC has only an integer value.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
Affected Products (NVD)
VendorProductVersion
p5-encode_projectp5-encode
3.05 ≤
𝑥
< 3.12
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libencode-perl
bookworm
3.19-1
fixed
bullseye
3.08-1+deb11u2
fixed
bullseye (security)
3.08-1+deb11u1
fixed
buster
not-affected
sid
3.21-1
fixed
stretch
not-affected
trixie
3.21-1
fixed
perl
bookworm
5.36.0-7+deb12u1
fixed
bullseye
5.32.1-4+deb11u3
fixed
bullseye (security)
5.32.1-4+deb11u4
fixed
buster
not-affected
sid
5.40.0-6
fixed
stretch
not-affected
trixie
5.40.0-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libencode-perl
bionic
not-affected
focal
not-affected
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needed
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needed
trusty
dne
xenial
needs-triage
perl
bionic
not-affected
focal
not-affected
groovy
ignored
hirsute
Fixed 5.32.1-3ubuntu2.1
released
impish
Fixed 5.32.1-3ubuntu3
released
jammy
Fixed 5.32.1-3ubuntu3
released
kinetic
Fixed 5.32.1-3ubuntu3
released
lunar
Fixed 5.32.1-3ubuntu3
released
mantic
Fixed 5.32.1-3ubuntu3
released
noble
Fixed 5.32.1-3ubuntu3
released
trusty
not-affected
xenial
not-affected
Common Weakness Enumeration
References
https://github.com/Perl/perl5/commit/c1a937fef07c061600a0078f4cb53fe9c2136bb9
https://github.com/dankogai/p5-encode/commit/527e482dc70b035d0df4f8c77a00d81f8d775c74
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NDGQSGMEZ75FJGBKNYC75OTO7TF7XHB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KOZYD7BH2DNIAEZ2ZL4PJ4QUVQI6Y33/
https://metacpan.org/dist/Encode/changes
https://news.cpanel.com/unscheduled-tsr-10-august-2021/
https://security-tracker.debian.org/tracker/CVE-2021-36770
https://security.netapp.com/advisory/ntap-20210909-0003/
https://github.com/Perl/perl5/commit/c1a937fef07c061600a0078f4cb53fe9c2136bb9
https://github.com/dankogai/p5-encode/commit/527e482dc70b035d0df4f8c77a00d81f8d775c74
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5NDGQSGMEZ75FJGBKNYC75OTO7TF7XHB/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KOZYD7BH2DNIAEZ2ZL4PJ4QUVQI6Y33/
https://metacpan.org/dist/Encode/changes
https://news.cpanel.com/unscheduled-tsr-10-august-2021/
https://security-tracker.debian.org/tracker/CVE-2021-36770
https://security.netapp.com/advisory/ntap-20210909-0003/
https://security.netapp.com/advisory/ntap-20241108-0002/