2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"collectionURL":"https://cpan.org/modules","defaultStatus":"unaffected","packageName":"perl","product":"perl","repo":"https://github.com/Perl/perl5","vendor":"SHAY","versions":[{"lessThan":"5.40.4-RC1","status":"affected","version":"5.9.4","versionType":"custom"},{"lessThan":"5.42.2-RC1","status":"affected","version":"5.41.0","versionType":"custom"},{"lessThan":"5.43.9","status":"affected","version":"5.43.0","versionType":"custom"}]}],"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB7DC630-9F3F-404F-9759-882BFCC79961","versionEndExcluding":"5.40.4","versionStartIncluding":"5.9.4","vulnerable":true},{"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"19F3A1E9-F479-4537-AA41-6800D49A3A68","versionEndExcluding":"5.42.2","versionStartIncluding":"5.41.0","vulnerable":true},{"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"A21CB5D2-7B78-485A-A6E8-5C2BBAE99334","versionEndExcluding":"5.43.9","versionStartIncluding":"5.43.0","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib.\n\nCompress::Raw::Zlib is included in the Perl package as a dual-life core module, and is vulnerable to CVE-2026-3381 due to a vendored version of zlib which has several vulnerabilities, including CVE-2026-27171. The bundled Compress::Raw::Zlib was updated to version 2.221 in Perl blead commit c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94."},{"lang":"es","value":"Las versiones de Perl desde la 5.9.4 anteriores a la 5.40.4-RC1, desde la 5.41.0 anteriores a la 5.42.2-RC1, y desde la 5.43.0 anteriores a la 5.43.9 contienen una versión vulnerable de Compress::Raw::Zlib.\n\nCompress::Raw::Zlib está incluido en el paquete de Perl como un módulo central de doble vida, y es vulnerable a CVE-2026-3381 debido a una versión empaquetada de zlib que tiene varias vulnerabilidades, incluyendo CVE-2026-27171. El Compress::Raw::Zlib empaquetado fue actualizado a la versión 2.221 en el commit de Perl blead c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94."}],"id":"CVE-2026-4176","lastModified":"2026-06-17T10:56:07.190","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-4176","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-03-30T15:34:29.395269Z","version":"2.0.3"}}]},"published":"2026-03-29T21:16:15.717","references":[{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Patch"],"url":"https://github.com/Perl/perl5/commit/c75ae9cc164205e1b6d6dbd57bd2c65c8593fe94"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Third Party Advisory"],"url":"https://lists.security.metacpan.org/cve-announce/msg/37638919/"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"],"url":"https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"],"url":"https://metacpan.org/release/SHAY/perl-5.40.4/changes"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Release Notes"],"url":"https://metacpan.org/release/SHAY/perl-5.42.2/changes"},{"source":"9b29abf9-4ab0-4765-b253-1875cd9b441e","tags":["Third Party Advisory"],"url":"https://www.cve.org/CVERecord?id=CVE-2026-3381"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"http://www.openwall.com/lists/oss-security/2026/03/30/2"}],"sourceIdentifier":"9b29abf9-4ab0-4765-b253-1875cd9b441e","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-Other"}],"source":"nvd@nist.gov","type":"Primary"}]}
|