Ubuntu fixes denial-of-service flaw in Perl XS::Parse::Keyword
Original title: USN-8940-1: Perl XS::Parse::Keyword module vulnerability
Crafted input to the module can crash a user or automated system that processes it; no fixed version is named.
Ubuntu Security Notice USN-8940-1 says the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system is tricked into receiving specially crafted input, an attacker could cause a denial of service. The notice snippet does not name affected releases, a fixed package version, or exploitation status.
Unconfirmed: Affected Ubuntu releases and the fixed package version are not in the snippet.
- The flaw is in the Perl XS::Parse::Keyword module.
- Impact described is denial of service from crafted input.
- No CVE, package version, or exploit status is in the snippet.
Impact: Denial of service from crafted input
| Product | Affected |
|---|---|
| Ubuntu Perl XS::Parse::Keyword | — |
- 1.Apply the Ubuntu update for the Perl XS::Parse::Keyword module.
- Vendors
- Ubuntu
- Products
- Perl XS::Parse::Keyword
From the original article
It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.