CVE-2015-8607 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-8607 Interim 1 32 2025-11-05T04:39:50Z current 2021-05-30T13:35:35Z 2025-11-05T04:39:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-8607 The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SLES for SAP Applications 11 SP3 SUSE CaaS Platform 3.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP1 perl perl-32bit perl-base perl-base-32bit perl-doc perl as a component of Magnum Orchestration 7 perl as a component of SLES for SAP Applications 11 SP3 perl as a component of SUSE CaaS Platform 3.0 perl-base as a component of SUSE CaaS Platform 3.0 perl as a component of SUSE Container as a Service Platform 2.0 perl as a component of SUSE Linux Enterprise Desktop 12 SP3 perl-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 perl-base as a component of SUSE Linux Enterprise Desktop 12 SP3 perl-doc as a component of SUSE Linux Enterprise Desktop 12 SP3 perl as a component of SUSE Linux Enterprise Desktop 12 SP4 perl-32bit as a component of SUSE Linux Enterprise Desktop 12 SP4 perl-base as a component of SUSE Linux Enterprise Desktop 12 SP4 perl-doc as a component of SUSE Linux Enterprise Desktop 12 SP4 perl as a component of SUSE Linux Enterprise High Performance Computing 12 SP4 perl as a component of SUSE Linux Enterprise Module for Basesystem 15 perl-base as a component of SUSE Linux Enterprise Module for Basesystem 15 perl-base-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 perl as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 perl-base as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 perl-base-32bit as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 perl-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 perl as a component of SUSE Linux Enterprise Module for Development Tools 15 perl-doc as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 perl as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 perl as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata perl as a component of SUSE Linux Enterprise Server 11 SP3 LTSS perl as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata perl as a component of SUSE Linux Enterprise Server 11 SP4 LTSS perl as a component of SUSE Linux Enterprise Server 12 SP1-LTSS perl-32bit as a component of SUSE Linux Enterprise Server 12 SP1-LTSS perl-base as a component of SUSE Linux Enterprise Server 12 SP1-LTSS perl-doc as a component of SUSE Linux Enterprise Server 12 SP1-LTSS perl as a component of SUSE Linux Enterprise Server 12 SP2-LTSS perl-32bit as a component of SUSE Linux Enterprise Server 12 SP2-LTSS perl-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS perl-doc as a component of SUSE Linux Enterprise Server 12 SP2-LTSS perl as a component of SUSE Linux Enterprise Server 12 SP3 perl-32bit as a component of SUSE Linux Enterprise Server 12 SP3 perl-base as a component of SUSE Linux Enterprise Server 12 SP3 perl-doc as a component of SUSE Linux Enterprise Server 12 SP3 perl as a component of SUSE Linux Enterprise Server 12 SP4 perl-32bit as a component of SUSE Linux Enterprise Server 12 SP4 perl-base as a component of SUSE Linux Enterprise Server 12 SP4 perl-doc as a component of SUSE Linux Enterprise Server 12 SP4 perl as a component of SUSE Linux Enterprise Server 12-LTSS perl-32bit as a component of SUSE Linux Enterprise Server 12-LTSS perl-base as a component of SUSE Linux Enterprise Server 12-LTSS perl-doc as a component of SUSE Linux Enterprise Server 12-LTSS perl as a component of SUSE Linux Enterprise Server for SAP Applications 12 perl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 perl-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 perl-base as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 perl-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 perl as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 perl-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 perl-base as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 perl-doc as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. CVE-2015-8607 Magnum Orchestration 7:perl SLES for SAP Applications 11 SP3:perl SUSE CaaS Platform 3.0:perl SUSE CaaS Platform 3.0:perl-base SUSE Container as a Service Platform 2.0:perl SUSE Linux Enterprise Desktop 12 SP3:perl SUSE Linux Enterprise Desktop 12 SP3:perl-32bit SUSE Linux Enterprise Desktop 12 SP3:perl-base SUSE Linux Enterprise Desktop 12 SP3:perl-doc SUSE Linux Enterprise Desktop 12 SP4:perl SUSE Linux Enterprise Desktop 12 SP4:perl-32bit SUSE Linux Enterprise Desktop 12 SP4:perl-base SUSE Linux Enterprise Desktop 12 SP4:perl-doc SUSE Linux Enterprise High Performance Computing 12 SP4:perl SUSE Linux Enterprise Module for Basesystem 15 SP1:perl SUSE Linux Enterprise Module for Basesystem 15 SP1:perl-base SUSE Linux Enterprise Module for Basesystem 15 SP1:perl-base-32bit SUSE Linux Enterprise Module for Basesystem 15:perl SUSE Linux Enterprise Module for Basesystem 15:perl-base SUSE Linux Enterprise Module for Basesystem 15:perl-base-32bit SUSE Linux Enterprise Module for Development Tools 15 SP1:perl SUSE Linux Enterprise Module for Development Tools 15 SP1:perl-doc SUSE Linux Enterprise Module for Development Tools 15:perl SUSE Linux Enterprise Module for Development Tools 15:perl-doc SUSE Linux Enterprise Server 11 SP1 for Teradata:perl SUSE Linux Enterprise Server 11 SP3 LTSS:perl SUSE Linux Enterprise Server 11 SP3 for Teradata:perl SUSE Linux Enterprise Server 11 SP4 LTSS:perl SUSE Linux Enterprise Server 12 SP1-LTSS:perl SUSE Linux Enterprise Server 12 SP1-LTSS:perl-32bit SUSE Linux Enterprise Server 12 SP1-LTSS:perl-base SUSE Linux Enterprise Server 12 SP1-LTSS:perl-doc SUSE Linux Enterprise Server 12 SP2-LTSS:perl SUSE Linux Enterprise Server 12 SP2-LTSS:perl-32bit SUSE Linux Enterprise Server 12 SP2-LTSS:perl-base SUSE Linux Enterprise Server 12 SP2-LTSS:perl-doc SUSE Linux Enterprise Server 12 SP3:perl SUSE Linux Enterprise Server 12 SP3:perl-32bit SUSE Linux Enterprise Server 12 SP3:perl-base SUSE Linux Enterprise Server 12 SP3:perl-doc SUSE Linux Enterprise Server 12 SP4:perl SUSE Linux Enterprise Server 12 SP4:perl-32bit SUSE Linux Enterprise Server 12 SP4:perl-base SUSE Linux Enterprise Server 12 SP4:perl-doc SUSE Linux Enterprise Server 12-LTSS:perl SUSE Linux Enterprise Server 12-LTSS:perl-32bit SUSE Linux Enterprise Server 12-LTSS:perl-base SUSE Linux Enterprise Server 12-LTSS:perl-doc SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-base SUSE Linux Enterprise Server for SAP Applications 12 SP2:perl-doc SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-base SUSE Linux Enterprise Server for SAP Applications 12 SP4:perl-doc SUSE Linux Enterprise Server for SAP Applications 12:perl important 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P 7.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L