High severity7.8NVD Advisory· Published May 23, 2017· Updated May 13, 2026

CVE-2017-0374

Description

lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the current working directory, related to use of . with the INC array.

Affected products

Config Model Project/Config Model
cpe:2.3:a:config-model_project:config-model:*:*:*:*:*:*:*:*
Range: <=2.101

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

anonscm.debian.org/cgit/pkg-perl/packages/libconfig-model-perl.git/commit/nvdPatch
cpansearch.perl.org/src/DDUMONT/Config-Model-2.102/ChangesnvdRelease Notes
security-tracker.debian.org/tracker/CVE-2017-0374nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000