High severity7.3NVD Advisory· Published Jan 13, 2016· Updated Jun 17, 2026
CVE-2015-8607
CVE-2015-8607
Description
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:perl:pathtools:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:perl:pathtools:*:*:*:*:*:*:*:*range: <=3.61
- (no CPE)range: < 3.62
cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
13- rt.perl.org/Public/Bug/Display.htmlnvdVendor Advisory
- cpansearch.perl.org/src/RJBS/PathTools-3.62/Changesnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-January/175494.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2016-January/176228.htmlnvd
- lists.opensuse.org/opensuse-updates/2016-03/msg00112.htmlnvd
- www.debian.org/security/2016/dsa-3441nvd
- www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.htmlnvd
- www.securityfocus.com/bid/80504nvd
- www.securitytracker.com/id/1034772nvd
- www.ubuntu.com/usn/USN-2878-1nvd
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplaynvd
- security.gentoo.org/glsa/201701-75nvd
- www.oracle.com/security-alerts/cpujul2020.htmlnvd
News mentions
0No linked articles in our index yet.