Logo
›
›vulnerability›CVE-2023-31484
Name
CVE-2023-31484
Source
NVD ( link)Debian ( link)
Description
CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS.
CWEs
CWE-295 CWE-295
Published Date
Updated Date
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2023/04/29/1Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/3Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/5Mailing List
http://www.openwall.com/lists/oss-security/2023/05/07/2Mailing List
https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/Mitigation
https://github.com/andk/cpanpm/pull/175Exploit
https://metacpan.org/dist/CPAN/changesRelease Notes
https://www.openwall.com/lists/oss-security/2023/04/18/14Mailing List
http://www.openwall.com/lists/oss-security/2023/04/29/1Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/3Mailing List
http://www.openwall.com/lists/oss-security/2023/05/03/5Mailing List
http://www.openwall.com/lists/oss-security/2023/05/07/2Mailing List
https://blog.hackeriet.no/perl-http-tiny-insecure-tls-default-affects-cpan-modules/Mitigation
https://github.com/andk/cpanpm/pull/175Exploit
https://metacpan.org/dist/CPAN/changesRelease Notes
https://www.openwall.com/lists/oss-security/2023/04/18/14Mailing List

Analysis#

Affected Component
Analysis
perl
Exploitable

Vulnerability Ratings#

8.1
CVSSv31
8.1
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
perl
buildroot
2025.02.x
5.40.4
Not Affected
perl
buildroot
master
5.42.2
Not Affected
perl
openwrt
master
5.40.0-r6
Not Affected
perl
openwrt
openwrt-25.12
5.40.0-r6
Not Affected
perl
yocto
master
5.42.2
Not Affected
perl
yocto
scarthgap
5.38.4
Not Affected