CVE-2017-6512: Canonical Ubuntu Linux

Medium severity, CVSS 5.9. EPSS: 2.4% chance of exploitation in the next 30 days.

Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving directory-permission loosening logic.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only; version 17.10 only
• Debian Debian Linux: version 8.0 only; version 9.0 only
• File::path Project File::path: before 2.13 (fixed in 2.13)

Published 2017-06-01. Last modified 2026-06-17.