DEBIAN-CVE-2010-1447

DEBIAN-CVE-2010-1447 PUBLISHED CVSS 9.300000190734863 CRITICAL

The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0 Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access restrictions, and inject and execute arbitrary code, via vectors involving subroutine references and delayed execution.

Risk Scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

Vendor	Product	Versions
Debian:13	perl	0, 0, 0
Debian:12	perl	0, 0, 0
Debian:11	perl	0, 0, 0
Debian:14	perl	0, 0, 0

Timeline

May 19, 2010 CVE Published
Aug 4, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2010-1447 advisory

Open in Interactive Console →