Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks
Priority LOW 25CWE-59Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Perl module Data::UUID from CPAN version 1.219 vulnerable to symlink attacks
Why it matters now
EPSS 0.00504 43rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| libdata-uuid-perl | libdata-uuid-perl | 1.219 | — | No fix listed | CNA |
- libdata-uuid-perl Vendorlibdata-uuid-perl Affected 1.219 Fixed in — No fix listed CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:data\:\:uuid_project:data\:\:uuid:*:*:*:*:*:*:*:* | uuid_project data\ | Vulnerable | Data |
| cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
- cpe:2.3:a:data\:\:uuid_project:data\:\:uuid:*:*:*:*:*:*:*:* Versions uuid_project data\ Vulnerable ·Data
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2013-4184
- 2026-10-03 Alias added: GHSA-52mm-w3hf-39rg
References
Advisory 8
- https://security-tracker.debian.org/tracker/CVE-2013-4184
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2013-4184
- https://access.redhat.com/security/cve/cve-2013-4184
- https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-4184
- http://www.openwall.com/lists/oss-security/2013/07/31/4
- FEDORA-2024-3da8ed5be3
- FEDORA-2024-a58a7e2388
- FEDORA-2024-08bb549a36
Sources
- CVE-2013-4184 · CVE Program
- CVE-2013-4184 · NVD
- FIRST EPSS
- GHSA-52mm-w3hf-39rg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences