CVE-2011-2728: Perl

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag, which triggers an uninitialized pointer dereference.

Affected products

• Perl Perl: up to and including 5.14.1; version 1.00 only; version 1.01 only; version 1.20 only; version 1.21 only; version 1.22 only; …

Published 2012-12-21. Last modified 2026-06-16.