CVE-2018-12015
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-12015
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12015.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2018-12015
- Related
- Published
- 2018-06-07T13:29:00Z
- Modified
- 2024-09-18T02:55:14.928328Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
- References
-
- http://www.securityfocus.com/bid/104423
- http://www.securitytracker.com/id/1041048
- https://access.redhat.com/errata/RHSA-2019:2097
- https://security.netapp.com/advisory/ntap-20180927-0001/
- https://www.debian.org/security/2018/dsa-4226
- http://seclists.org/fulldisclosure/2019/Mar/49
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=900834
- https://seclists.org/bugtraq/2019/Mar/42
- https://support.apple.com/kb/HT209600
- https://usn.ubuntu.com/3684-1/
- https://usn.ubuntu.com/3684-2/
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://security.alpinelinux.org/vuln/CVE-2018-12015
- https://security-tracker.debian.org/tracker/CVE-2018-12015
Affected packages
Alpine:v3.10 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.11 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.12 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.13 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.14 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.15 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.16 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.17 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.18 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.19 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.20 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.5 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.24.4-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.3-r0
5.24.3-r1
5.24.4-r0
Alpine:v3.6 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.24.4-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.24.3-r0
5.24.3-r1
5.24.4-r0
Alpine:v3.7 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.8 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Alpine:v3.9 / perl
Package
- Name
- perl
- Purl
- pkg:apk/alpine/perl?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.26.2-r1
Affected versions
5.*
5.10.0-r0
5.10.0-r1
5.10.1-r0
5.10.1-r1
5.10.1-r2
5.12.1-r0
5.12.2-r0
5.12.2-r1
5.12.3-r0
5.14.0-r0
5.14.1-r0
5.14.2-r0
5.14.2-r1
5.16.0-r0
5.16.1-r0
5.16.2-r0
5.16.3-r0
5.18.0-r0
5.18.1-r0
5.18.2-r0
5.20.0-r0
5.20.1-r0
5.20.2-r0
5.20.2-r1
5.22.0-r0
5.22.1-r0
5.22.2-r0
5.24.0-r0
5.24.0-r1
5.24.0-r2
5.24.1-r0
5.24.1-r1
5.24.1-r2
5.26.0-r0
5.26.1-r0
5.26.1-r1
5.26.2-r0
Debian:11 / perl
Package
- Name
- perl
- Purl
- pkg:deb/debian/perl?arch=source
Debian:12 / perl
Package
- Name
- perl
- Purl
- pkg:deb/debian/perl?arch=source
Debian:13 / perl
Package
- Name
- perl
- Purl
- pkg:deb/debian/perl?arch=source