| Package | Affected versions | Patched versions |
|---|---|---|
| storable | < 3.05 | 3.05 |
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free