Threat Intelligence Database

Data::Intern::Shared versions before 0.02 for Perl create a memory-mapped file with overly permissive permissions (world-readable) and open it without secure flags, allowing local users to read sensitive IPC data or exploit race conditions via symlink attacks. The file is created with mode 0666 but typically results in 0644 permissions due to umask, and lacks O_EXCL and O_NOFOLLOW flags, enabling pre-creation races and symlink following in shared directories like /tmp or /dev/shm.

Data::Intern::Shared versions before 0.02 for Perl contain an out-of-bounds read vulnerability in the si_idx_find function. This occurs due to unvalidated indices used for slot, reverse, and arena arrays, allowing reads beyond intended memory bounds. A local attacker who can modify the backing file may exploit this to disclose adjacent process memory. The vulnerability has a critical severity with a CVSS score of 9.1.