Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2021-36770
Description:Encode.pm, as distributed in Perl through 5.34.0, allows local users to gain privileges via a Trojan horse Encode::ConfigLocal library (in the current working directory) that preempts dynamic module loading. Exploitation requires an unusual configuration, and certain 2021 versions of Encode.pm (3.05 through 3.11). This issue occurs because the || operator evaluates @INC in a scalar context, and thus @INC has only an integer value.
Test IDs: 1.3.6.1.4.1.25623.1.0.845212   1.3.6.1.4.1.25623.1.1.2.2022.2433   1.3.6.1.4.1.25623.1.1.10.2021.0527   1.3.6.1.4.1.25623.1.0.879931   1.3.6.1.4.1.25623.1.1.2.2022.2878   1.3.6.1.4.1.25623.1.0.817770   1.3.6.1.4.1.25623.1.1.2.2022.2420   1.3.6.1.4.1.25623.1.1.2.2022.2896  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2021-36770
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5NDGQSGMEZ75FJGBKNYC75OTO7TF7XHB/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6KOZYD7BH2DNIAEZ2ZL4PJ4QUVQI6Y33/
https://security-tracker.debian.org/tracker/CVE-2021-36770




© 1998-2025 E-Soft Inc. All rights reserved.