CVE-2017-20230

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2017-20230", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "state": "PUBLISHED", "assignerShortName": "CPANSec", "dateReserved": "2026-03-28T19:24:26.125Z", "datePublished": "2026-04-21T15:26:18.216Z", "dateUpdated": "2026-04-21T18:22:25.354Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Storable", "product": "Storable", "repo": "https://github.com/Perl/perl5/", "vendor": "NWCLARK", "versions": [{"lessThan": "3.05", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Storable versions before 3.05 for Perl has a stack overflow.\n\nThe retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-04-21T15:30:39.000Z"}, "references": [{"tags": ["issue-tracking"], "url": "https://github.com/Perl/perl5/issues/15831"}, {"tags": ["patch"], "url": "https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch"}, {"tags": ["release-notes"], "url": "https://metacpan.org/release/RURBAN/Storable-3.05/changes"}, {"tags": ["mailing-list"], "url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html"}, {"tags": ["mailing-list"], "url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html"}], "solutions": [{"lang": "en", "value": "Upgrade to Storable version 3.05 or newer."}], "source": {"discovery": "UNKNOWN"}, "timeline": [{"lang": "en", "time": "2017-01-24T00:00:00.000Z", "value": "Perl bug RT1 30635 reported."}, {"lang": "en", "time": "2017-01-25T00:00:00.000Z", "value": "Patch committed."}, {"lang": "en", "time": "2017-01-29T00:00:00.000Z", "value": "Storable version 3.05 released."}, {"lang": "en", "time": "2018-02-20T00:00:00.000Z", "value": "Perl v5.27.9 released with Storable 3.06."}, {"lang": "en", "time": "2018-10-06T00:00:00.000Z", "value": "issue assigned CPANSA-Storable-2017-01 in the CPANSA distribution."}], "title": "Storable versions before 3.05 for Perl has a stack overflow", "x_generator": {"engine": "cpansec-cna-tool 0.1"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-21T16:28:22.354136Z", "id": "CVE-2017-20230", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-21T16:29:10.971Z"}}, {"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/04/21/5"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-21T18:22:25.354Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/04/21/5"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-04-21T18:22:25.354Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2017-20230", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-21T16:28:22.354136Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-21T16:28:46.584Z"}}], "cna": {"title": "Storable versions before 3.05 for Perl has a stack overflow", "source": {"discovery": "UNKNOWN"}, "affected": [{"repo": "https://github.com/Perl/perl5/", "vendor": "NWCLARK", "product": "Storable", "versions": [{"status": "affected", "version": "0", "lessThan": "3.05", "versionType": "custom"}], "packageName": "Storable", "collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2017-01-24T00:00:00.000Z", "value": "Perl bug RT1 30635 reported."}, {"lang": "en", "time": "2017-01-25T00:00:00.000Z", "value": "Patch committed."}, {"lang": "en", "time": "2017-01-29T00:00:00.000Z", "value": "Storable version 3.05 released."}, {"lang": "en", "time": "2018-02-20T00:00:00.000Z", "value": "Perl v5.27.9 released with Storable 3.06."}, {"lang": "en", "time": "2018-10-06T00:00:00.000Z", "value": "issue assigned CPANSA-Storable-2017-01 in the CPANSA distribution."}], "solutions": [{"lang": "en", "value": "Upgrade to Storable version 3.05 or newer."}], "references": [{"url": "https://github.com/Perl/perl5/issues/15831", "tags": ["issue-tracking"]}, {"url": "https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch", "tags": ["patch"]}, {"url": "https://metacpan.org/release/RURBAN/Storable-3.05/changes", "tags": ["release-notes"]}, {"url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html", "tags": ["mailing-list"]}, {"url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html", "tags": ["mailing-list"]}], "x_generator": {"engine": "cpansec-cna-tool 0.1"}, "descriptions": [{"lang": "en", "value": "Storable versions before 3.05 for Perl has a stack overflow.\n\nThe retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "shortName": "CPANSec", "dateUpdated": "2026-04-21T15:30:39.000Z"}}}, "cveMetadata": {"cveId": "CVE-2017-20230", "state": "PUBLISHED", "dateUpdated": "2026-04-21T18:22:25.354Z", "dateReserved": "2026-03-28T19:24:26.125Z", "assignerOrgId": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "datePublished": "2026-04-21T15:26:18.216Z", "assignerShortName": "CPANSec"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://cpan.org/modules", "defaultStatus": "unaffected", "packageName": "Storable", "product": "Storable", "repo": "https://github.com/Perl/perl5/", "vendor": "NWCLARK", "versions": [{"lessThan": "3.05", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nwclark:storable:*:*:*:*:*:perl:*:*", "matchCriteriaId": "53358ECF-29FE-4B4F-8189-38E0B3034C22", "versionEndExcluding": "3.05", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Storable versions before 3.05 for Perl has a stack overflow.\n\nThe retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow."}], "id": "CVE-2017-20230", "lastModified": "2026-06-17T01:15:27.847", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2017-20230", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-21T16:28:22.354136Z", "version": "2.0.3"}}]}, "published": "2026-04-21T16:16:18.077", "references": [{"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Patch"], "url": "https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Issue Tracking"], "url": "https://github.com/Perl/perl5/issues/15831"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Release Notes"], "url": "https://metacpan.org/release/RURBAN/Storable-3.05/changes"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Third Party Advisory"], "url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html"}, {"source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "tags": ["Third Party Advisory"], "url": "https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2026/04/21/5"}], "sourceIdentifier": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-121"}], "source": "9b29abf9-4ab0-4765-b253-1875cd9b441e", "type": "Secondary"}]}

{"bugzilla": {"description": "perl-Storable: Storable for Perl: Denial of service via stack overflow in retrieve_hook function", "id": "2460147", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460147"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-190", "details": ["A flaw was found in Storable for Perl. A remote attacker can exploit a vulnerability in the `retrieve_hook` function by crafting malicious data. This flaw occurs because the function incorrectly handles the length of class names, storing it as a signed integer but processing it as unsigned during read operations. Successful exploitation leads to a stack overflow, which can cause a denial of service."], "name": "CVE-2017-20230", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "perl-Storable", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "perl-Storable", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "perl:5.32/perl-Storable", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "perl-Storable", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "perl-Storable", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Not affected", "package_name": "perl-Storable", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-04-21T15:26:18Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2017-20230\nhttps://nvd.nist.gov/vuln/detail/CVE-2017-20230\nhttps://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch\nhttps://github.com/Perl/perl5/issues/15831\nhttps://metacpan.org/release/RURBAN/Storable-3.05/changes\nhttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html\nhttps://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html"], "statement": "This is an Moderate denial of service flaw in perl-Storable. The vulnerability arises from incorrect handling of class name lengths during deserialization, which can lead to a stack overflow when processing specially crafted data. To exploit this vulnerability the attacker needs to trick the user to use a maliciously crafted data.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,3.05)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Storable", "source": "cna", "vendor": "NWCLARK"}, "product": "storable", "vendor": "nwclark"}], "analysis": {"en": {"generated_at": "2026-04-29T00:26:42.153263+00:00", "value": {"mitigation_remediation": ["Upgrade the Storable module to version 3.05 or newer", "Restrict deserialization of Storable data to inputs from trusted sources only, isolating any untrusted data handling in a sandboxed environment", "If immediate upgrade is not feasible, replace Storable with a vetted alternative serialization library and disable unsafe deserialization functions"], "summary": {"action": "Patch ASAP", "impact": "Potential for arbitrary code execution due to stack corruption"}, "threat_synthesis": {"affected_systems": "Affected products include the Perl Storable module distributed by the NWCLARK:Storable vendor. Any installation of Storable\u00a03.04 or earlier is vulnerable. The concern applies to all systems running Perl applications that import or deserialize Storable data from untrusted sources.", "description_and_impact": "The Storable module in Perl suffered a vulnerability that triggers a stack overflow in versions prior to\u00a03.05. The retrieve_hook routine stores the class name length as a signed integer but later interprets it as unsigned during read operations, allowing an attacker to engineer data that overflows the stack. This corruption can lead to the replacement of execution pointers or other critical data, potentially enabling arbitrary code execution within the context of the affected Perl process.", "risk_and_exploitability": "The CVSS score is 10, indicating critical severity. The EPSS score is < 1%, indicating a very low but non\u2011zero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would require the attacker to supply crafted Storable data to a vulnerable Perl program. Based on the description, it is inferred that the likely attack vector is through deserialization of maliciously constructed data, which may occur via local file uploads or remote input depending on the application\u2019s design."}}}}, "created": "2026-04-22T05:45:09.827041+00:00", "updated": "2026-04-29T00:30:16.131704+00:00", "vendors": ["nwclark", "nwclark$PRODUCT$storable"]}