CVE-2023-31484

CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.1 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
cpanpm_projectcpanpm
𝑥
< 2.35
perlperl
𝑥
< 5.38.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
cpanpm_projectcpanpm
𝑥
< 2.35
ADP
Debian logo
Debian Releases
Debian Product
Codename
perl
bookworm
no-dsa
bullseye
vulnerable
bullseye (security)
5.32.1-4+deb11u4
fixed
buster
no-dsa
sid
5.40.0-8
fixed
trixie
5.40.0-8
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
perl
bionic
Fixed 5.26.1-6ubuntu0.7
released
focal
Fixed 5.30.0-9ubuntu0.4
released
jammy
Fixed 5.34.0-3ubuntu1.2
released
kinetic
Fixed 5.34.0-5ubuntu1.2
released
lunar
Fixed 5.36.0-7ubuntu0.23.04.1
released
trusty
Fixed 5.18.2-2ubuntu1.7+esm5
released
xenial
Fixed 5.22.1-9ubuntu0.9+esm2
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
perl
suse enterprise desktop 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.26.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.26.1
fixed
suse enterprise server 12 SP3
5.18.2-12.26.1
fixed
suse enterprise server 12 SP4
5.18.2-12.26.1
fixed
suse enterprise server 12 SP5
5.18.2-12.26.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.14.1
fixed
perl-32bit
suse enterprise sap 12 SP5
5.18.2-12.26.1
fixed
suse enterprise server 12 SP2
5.18.2-12.26.1
fixed
suse enterprise server 12 SP3
5.18.2-12.26.1
fixed
suse enterprise server 12 SP4
5.18.2-12.26.1
fixed
suse enterprise server 12 SP5
5.18.2-12.26.1
fixed
perl-base
suse enterprise desktop 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.26.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.26.1
fixed
suse enterprise server 12 SP3
5.18.2-12.26.1
fixed
suse enterprise server 12 SP4
5.18.2-12.26.1
fixed
suse enterprise server 12 SP5
5.18.2-12.26.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.14.1
fixed
perl-base-32bit
suse enterprise desktop 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.14.1
fixed
perl-core-DB_File
suse enterprise desktop 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.14.1
fixed
perl-doc
suse enterprise sap 12 SP5
5.18.2-12.26.1
fixed
suse enterprise server 12 SP2
5.18.2-12.26.1
fixed
suse enterprise server 12 SP3
5.18.2-12.26.1
fixed
suse enterprise server 12 SP4
5.18.2-12.26.1
fixed
suse enterprise server 12 SP5
5.18.2-12.26.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.14.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.14.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
perl-CPAN
RHEL 9
0:2.29-3.el9
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
perl
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-Attribute-Handlers
Amazon Linux 2023
0:1.01-477.amzn2023.0.4
fixed
perl-AutoLoader
Amazon Linux 2023
0:5.74-477.amzn2023.0.4
fixed
perl-AutoSplit
Amazon Linux 2023
0:5.74-477.amzn2023.0.4
fixed
perl-B
Amazon Linux 2023
0:1.80-477.amzn2023.0.4
fixed
perl-B-debuginfo
Amazon Linux 2023
0:1.80-477.amzn2023.0.4
fixed
perl-Benchmark
Amazon Linux 2023
0:1.23-477.amzn2023.0.4
fixed
perl-CPAN
Amazon Linux 1
0:1.9800-294.44.amzn1
fixed
Amazon Linux 2
0:1.9800-299.amzn2.0.2
fixed
Amazon Linux 2023
0:2.34-1.amzn2023.0.3
fixed
perl-CPAN-tests
Amazon Linux 2023
0:2.34-1.amzn2023.0.3
fixed
perl-Class-Struct
Amazon Linux 2023
0:0.66-477.amzn2023.0.4
fixed
perl-Config-Extensions
Amazon Linux 2023
0:0.03-477.amzn2023.0.4
fixed
perl-DBM_Filter
Amazon Linux 2023
0:0.06-477.amzn2023.0.4
fixed
perl-Devel-Peek
Amazon Linux 2023
0:1.28-477.amzn2023.0.4
fixed
perl-Devel-Peek-debuginfo
Amazon Linux 2023
0:1.28-477.amzn2023.0.4
fixed
perl-Devel-SelfStubber
Amazon Linux 2023
0:1.06-477.amzn2023.0.4
fixed
perl-DirHandle
Amazon Linux 2023
0:1.05-477.amzn2023.0.4
fixed
perl-Dumpvalue
Amazon Linux 2023
0:2.27-477.amzn2023.0.4
fixed
perl-DynaLoader
Amazon Linux 2023
0:1.47-477.amzn2023.0.4
fixed
perl-English
Amazon Linux 2023
0:1.11-477.amzn2023.0.4
fixed
perl-Errno
Amazon Linux 2023
0:1.30-477.amzn2023.0.4
fixed
perl-ExtUtils-CBuilder
Amazon Linux 1
1:0.28.2.6-294.44.amzn1
fixed
Amazon Linux 2
1:0.28.2.6-299.amzn2.0.2
fixed
perl-ExtUtils-Constant
Amazon Linux 2023
0:0.25-477.amzn2023.0.4
fixed
perl-ExtUtils-Embed
Amazon Linux 1
0:1.30-294.44.amzn1
fixed
Amazon Linux 2
0:1.30-299.amzn2.0.2
fixed
Amazon Linux 2023
0:1.35-477.amzn2023.0.4
fixed
perl-ExtUtils-Install
Amazon Linux 1
0:1.58-294.44.amzn1
fixed
Amazon Linux 2
0:1.58-299.amzn2.0.2
fixed
perl-ExtUtils-Miniperl
Amazon Linux 2023
0:1.09-477.amzn2023.0.4
fixed
perl-Fcntl
Amazon Linux 2023
0:1.13-477.amzn2023.0.4
fixed
perl-Fcntl-debuginfo
Amazon Linux 2023
0:1.13-477.amzn2023.0.4
fixed
perl-File-Basename
Amazon Linux 2023
0:2.85-477.amzn2023.0.4
fixed
perl-File-Compare
Amazon Linux 2023
0:1.100.600-477.amzn2023.0.4
fixed
perl-File-Copy
Amazon Linux 2023
0:2.34-477.amzn2023.0.4
fixed
perl-File-DosGlob
Amazon Linux 2023
0:1.12-477.amzn2023.0.4
fixed
perl-File-DosGlob-debuginfo
Amazon Linux 2023
0:1.12-477.amzn2023.0.4
fixed
perl-File-Find
Amazon Linux 2023
0:1.37-477.amzn2023.0.4
fixed
perl-File-stat
Amazon Linux 2023
0:1.09-477.amzn2023.0.4
fixed
perl-FileCache
Amazon Linux 2023
0:1.10-477.amzn2023.0.4
fixed
perl-FileHandle
Amazon Linux 2023
0:2.03-477.amzn2023.0.4
fixed
perl-FindBin
Amazon Linux 2023
0:1.51-477.amzn2023.0.4
fixed
perl-GDBM_File
Amazon Linux 2023
0:1.18-477.amzn2023.0.4
fixed
perl-GDBM_File-debuginfo
Amazon Linux 2023
0:1.18-477.amzn2023.0.4
fixed
perl-Getopt-Std
Amazon Linux 2023
0:1.12-477.amzn2023.0.4
fixed
perl-Hash-Util
Amazon Linux 2023
0:0.23-477.amzn2023.0.4
fixed
perl-Hash-Util-FieldHash
Amazon Linux 2023
0:1.20-477.amzn2023.0.4
fixed
perl-Hash-Util-FieldHash-debuginfo
Amazon Linux 2023
0:1.20-477.amzn2023.0.4
fixed
perl-Hash-Util-debuginfo
Amazon Linux 2023
0:0.23-477.amzn2023.0.4
fixed
perl-I18N-Collate
Amazon Linux 2023
0:1.02-477.amzn2023.0.4
fixed
perl-I18N-LangTags
Amazon Linux 2023
0:0.44-477.amzn2023.0.4
fixed
perl-I18N-Langinfo
Amazon Linux 2023
0:0.19-477.amzn2023.0.4
fixed
perl-I18N-Langinfo-debuginfo
Amazon Linux 2023
0:0.19-477.amzn2023.0.4
fixed
perl-IO
Amazon Linux 2023
0:1.43-477.amzn2023.0.4
fixed
perl-IO-Zlib
Amazon Linux 1
1:1.10-294.44.amzn1
fixed
Amazon Linux 2
1:1.10-299.amzn2.0.2
fixed
perl-IO-debuginfo
Amazon Linux 2023
0:1.43-477.amzn2023.0.4
fixed
perl-IPC-Open3
Amazon Linux 2023
0:1.21-477.amzn2023.0.4
fixed
perl-Locale-Maketext-Simple
Amazon Linux 1
1:0.21-294.44.amzn1
fixed
Amazon Linux 2
1:0.21-299.amzn2.0.2
fixed
Amazon Linux 2023
1:0.21-477.amzn2023.0.4
fixed
perl-Math-Complex
Amazon Linux 2023
0:1.59-477.amzn2023.0.4
fixed
perl-Memoize
Amazon Linux 2023
0:1.03-477.amzn2023.0.4
fixed
perl-Module-CoreList
Amazon Linux 1
1:2.76.02-294.44.amzn1
fixed
Amazon Linux 2
1:2.76.02-299.amzn2.0.2
fixed
perl-Module-Loaded
Amazon Linux 1
1:0.08-294.44.amzn1
fixed
Amazon Linux 2
1:0.08-299.amzn2.0.2
fixed
Amazon Linux 2023
1:0.08-477.amzn2023.0.4
fixed
perl-NDBM_File
Amazon Linux 2023
0:1.15-477.amzn2023.0.4
fixed
perl-NDBM_File-debuginfo
Amazon Linux 2023
0:1.15-477.amzn2023.0.4
fixed
perl-NEXT
Amazon Linux 2023
0:0.67-477.amzn2023.0.4
fixed
perl-Net
Amazon Linux 2023
0:1.02-477.amzn2023.0.4
fixed
perl-ODBM_File
Amazon Linux 2023
0:1.16-477.amzn2023.0.4
fixed
perl-ODBM_File-debuginfo
Amazon Linux 2023
0:1.16-477.amzn2023.0.4
fixed
perl-Object-Accessor
Amazon Linux 1
1:0.42-294.44.amzn1
fixed
Amazon Linux 2
1:0.42-299.amzn2.0.2
fixed
perl-Opcode
Amazon Linux 2023
0:1.48-477.amzn2023.0.4
fixed
perl-Opcode-debuginfo
Amazon Linux 2023
0:1.48-477.amzn2023.0.4
fixed
perl-POSIX
Amazon Linux 2023
0:1.94-477.amzn2023.0.4
fixed
perl-POSIX-debuginfo
Amazon Linux 2023
0:1.94-477.amzn2023.0.4
fixed
perl-Package-Constants
Amazon Linux 1
1:0.02-294.44.amzn1
fixed
Amazon Linux 2
1:0.02-299.amzn2.0.2
fixed
perl-Pod-Escapes
Amazon Linux 1
1:1.04-294.44.amzn1
fixed
Amazon Linux 2
1:1.04-299.amzn2.0.2
fixed
perl-Pod-Functions
Amazon Linux 2023
0:1.13-477.amzn2023.0.4
fixed
perl-Pod-Html
Amazon Linux 2023
0:1.25-477.amzn2023.0.4
fixed
perl-Safe
Amazon Linux 2023
0:2.41-477.amzn2023.0.4
fixed
perl-Search-Dict
Amazon Linux 2023
0:1.07-477.amzn2023.0.4
fixed
perl-SelectSaver
Amazon Linux 2023
0:1.02-477.amzn2023.0.4
fixed
perl-SelfLoader
Amazon Linux 2023
0:1.26-477.amzn2023.0.4
fixed
perl-Symbol
Amazon Linux 2023
0:1.08-477.amzn2023.0.4
fixed
perl-Sys-Hostname
Amazon Linux 2023
0:1.23-477.amzn2023.0.4
fixed
perl-Sys-Hostname-debuginfo
Amazon Linux 2023
0:1.23-477.amzn2023.0.4
fixed
perl-Term-Complete
Amazon Linux 2023
0:1.403-477.amzn2023.0.4
fixed
perl-Term-ReadLine
Amazon Linux 2023
0:1.17-477.amzn2023.0.4
fixed
perl-Test
Amazon Linux 2023
0:1.31-477.amzn2023.0.4
fixed
perl-Text-Abbrev
Amazon Linux 2023
0:1.02-477.amzn2023.0.4
fixed
perl-Thread
Amazon Linux 2023
0:3.05-477.amzn2023.0.4
fixed
perl-Thread-Semaphore
Amazon Linux 2023
0:2.13-477.amzn2023.0.4
fixed
perl-Tie
Amazon Linux 2023
0:4.6-477.amzn2023.0.4
fixed
perl-Tie-File
Amazon Linux 2023
0:1.06-477.amzn2023.0.4
fixed
perl-Tie-Memoize
Amazon Linux 2023
0:1.1-477.amzn2023.0.4
fixed
perl-Time
Amazon Linux 2023
0:1.03-477.amzn2023.0.4
fixed
perl-Time-Piece
Amazon Linux 1
0:1.20.1-294.44.amzn1
fixed
Amazon Linux 2
0:1.20.1-299.amzn2.0.2
fixed
Amazon Linux 2023
0:1.3401-477.amzn2023.0.4
fixed
perl-Time-Piece-debuginfo
Amazon Linux 2023
0:1.3401-477.amzn2023.0.4
fixed
perl-Unicode-UCD
Amazon Linux 2023
0:0.75-477.amzn2023.0.4
fixed
perl-User-pwent
Amazon Linux 2023
0:1.03-477.amzn2023.0.4
fixed
perl-autouse
Amazon Linux 2023
0:1.11-477.amzn2023.0.4
fixed
perl-base
Amazon Linux 2023
0:2.27-477.amzn2023.0.4
fixed
perl-blib
Amazon Linux 2023
0:1.07-477.amzn2023.0.4
fixed
perl-core
Amazon Linux 1
0:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
0:5.16.3-299.amzn2.0.2
fixed
perl-debugger
Amazon Linux 2023
0:1.56-477.amzn2023.0.4
fixed
perl-debuginfo
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-debugsource
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-deprecate
Amazon Linux 2023
0:0.04-477.amzn2023.0.4
fixed
perl-devel
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-diagnostics
Amazon Linux 2023
0:1.37-477.amzn2023.0.4
fixed
perl-doc
Amazon Linux 2023
0:5.32.1-477.amzn2023.0.4
fixed
perl-encoding-warnings
Amazon Linux 2023
0:0.13-477.amzn2023.0.4
fixed
perl-fields
Amazon Linux 2023
0:2.27-477.amzn2023.0.4
fixed
perl-filetest
Amazon Linux 2023
0:1.03-477.amzn2023.0.4
fixed
perl-if
Amazon Linux 2023
0:0.60.800-477.amzn2023.0.4
fixed
perl-interpreter
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-interpreter-debuginfo
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-less
Amazon Linux 2023
0:0.03-477.amzn2023.0.4
fixed
perl-lib
Amazon Linux 2023
0:0.65-477.amzn2023.0.4
fixed
perl-libnetcfg
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-libs
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-libs-debuginfo
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-locale
Amazon Linux 2023
0:1.09-477.amzn2023.0.4
fixed
perl-macros
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-meta-notation
Amazon Linux 2023
0:5.32.1-477.amzn2023.0.4
fixed
perl-mro
Amazon Linux 2023
0:1.23-477.amzn2023.0.4
fixed
perl-mro-debuginfo
Amazon Linux 2023
0:1.23-477.amzn2023.0.4
fixed
perl-open
Amazon Linux 2023
0:1.12-477.amzn2023.0.4
fixed
perl-overload
Amazon Linux 2023
0:1.31-477.amzn2023.0.4
fixed
perl-overloading
Amazon Linux 2023
0:0.02-477.amzn2023.0.4
fixed
perl-ph
Amazon Linux 2023
0:5.32.1-477.amzn2023.0.4
fixed
perl-sigtrap
Amazon Linux 2023
0:1.09-477.amzn2023.0.4
fixed
perl-sort
Amazon Linux 2023
0:2.04-477.amzn2023.0.4
fixed
perl-subs
Amazon Linux 2023
0:1.03-477.amzn2023.0.4
fixed
perl-tests
Amazon Linux 1
4:5.16.3-294.44.amzn1
fixed
Amazon Linux 2
4:5.16.3-299.amzn2.0.2
fixed
Amazon Linux 2023
4:5.32.1-477.amzn2023.0.4
fixed
perl-utils
Amazon Linux 2023
0:5.32.1-477.amzn2023.0.4
fixed
perl-vars
Amazon Linux 2023
0:1.05-477.amzn2023.0.4
fixed
perl-vmsish
Amazon Linux 2023
0:1.04-477.amzn2023.0.4
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
perl
CBL-Mariner 2.0
0:5.34.1-489.cm2
fixed
References