Security Advisories (2)
CVE-2017-20230
(2026-04-21)
Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.
- https://github.com/Perl/perl5/issues/15831
- https://github.com/Perl/perl5/commit/a258c17c6937f79529c8319a829310e09cdbd216.patch
- https://metacpan.org/release/RURBAN/Storable-3.05/changes
- https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242533.html
- https://www.nntp.perl.org/group/perl.perl5.porters/2017/01/msg242703.html
CPANSA-Storable-2017-01
(2017-01-29)
Malcrafted storable files or buffers.
Modules
persistency for perl data structures
Other files
Module Install Instructions
To install , copy and paste the appropriate command in to your terminal.
cpanm RAM/Storable-0.4@5.tar.gz
perl -MCPAN -e shell
install RAM/Storable-0.4@5.tar.gz
For more information on module installation, please visit the detailed CPAN module installation guide.