« Volver al listado

CVE-2013-7284

Estado: ModificadaMedia (6.8)—

The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Malcolm Nooning — Pirpc

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2013-7284",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-04-29T14:38:49.890",
  "references": [
    {
      "url": "http://seclists.org/oss-sec/2014/q1/56",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/62",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1030572",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051108",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://rt.cpan.org/Public/Bug/Display.html?id=90474",
      "tags": [
        "Patch"
      ],
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/56",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://seclists.org/oss-sec/2014/q1/62",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734789",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1030572",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1051108",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://rt.cpan.org/Public/Bug/Display.html?id=90474",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The PlRPC module, possibly 0.2020 and earlier, for Perl uses the Storable module, which allows remote attackers to execute arbitrary code via a crafted request, which is not properly handled when it is deserialized."
    },
    {
      "lang": "es",
      "value": "El módulo PlRPC para Perl, posiblemente 0.2020 y anteriores,  utiliza el módulo Storable, lo que permite a atacantes remotos ejecutar código arbitrario a través de una solicitud manipulada, lo cual no se maneja debidamente cuando está deserializada."
    }
  ],
  "lastModified": "2026-06-17T00:01:39.647",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:*:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "062463DB-4336-4A70-81A9-6002A812F3FC",
              "versionEndIncluding": "0.2020"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2000:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A94933B1-ECFA-4CA9-BAC9-A85963F224A3"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2001:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C35CFF4A-F2A9-4693-8D6C-D32A409001EC"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2002:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7E5FDC8-98EC-429A-88AE-68180B4242E4"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2003:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CD0EC24-E6FB-44DA-8287-CC3A7342CFEE"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2010:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8F053738-93E7-4C5F-A192-0D0656F45D19"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2011:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "123D7D8E-70F0-4859-AF27-0BBB5BB4B1D1"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2012:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDCE71FF-A65D-4CB3-9C03-F4EFB7255AD2"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2013:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F064F64-8CB8-4D1E-8DE0-732FA6A457B7"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2014:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AAF3DDDB-79AF-483A-969A-A30241A1C532"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2016:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46D50C88-98FF-48FE-A36D-0494821DFE00"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2017:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE5EDAC9-B243-412F-B4C8-0AB986514FD6"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2018:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "528B84CD-478A-441B-BD2B-AE6B0978ABBB"
            },
            {
              "criteria": "cpe:2.3:a:malcolm_nooning:pirpc:0.2019:*:*:*:*:perl:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D3C4B2DB-9D6A-499A-9F33-E8FEB3716B24"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}