PT-2025-14019 · Rrwo · Linux::Statm::Tiny

Publicado 2025-04-01 · Atualizado 2025-04-01 · CVE-2025-3051

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238.

If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution.

Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2025-3051

Produtos afetados

Linux::Statm::Tiny

Referências · 7

• https://twitter.com/CVEnew/status/1906977440565502246 · Publicação no Twitter
• https://t.me/cvedetector/21713 · Publicação no Telegram
• https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0701/changes · Nota
• https://metacpan.org/release/RRWO/Linux-Statm-Tiny-0.0700/source/lib/Linux/Statm/Tiny/Mite.pm#L82 · Nota
• https://t.me/cvetracker/20434 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-3051 · Nota de Segurança
• https://blogs.perl.org/users/todd_rinaldo/2016/11/what-happened-to-dot-in-inc.html · Nota