Stack Overflow Vulnerability in Storable for Perl by Perl

CVE-2017-20230

What is CVE-2017-20230?

The Storable module for Perl, prior to version 3.05, is susceptible to a stack overflow vulnerability. This issue arises from the retrieve_hook function, where it improperly handles the class name length by storing it in a signed integer but treating it as unsigned during read operations. This discrepancy can be exploited by an attacker to craft malicious data, potentially triggering the overflow and leading to further malicious exploits or application instability. Users are recommended to update to the latest version to mitigate this risk.

References