CVE-2026-65062— EGOR Data::SortedSet::Shared 后置链接漏洞
Affected Version Matrix 1
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| EGOR | Data::SortedSet::Shared | < 0.03 | affected |
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-65062の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW
ソース: CVE Program / CVE List V5
脆弱性説明
Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW. The segment is created in sortedset.h with open(path, O_RDWR|O_CREAT, 0666). The mode is 0666, so under the default umask 022 the file is created mode 0644 (world-readable). O_NOFOLLOW is absent, so a symlink planted at the path is followed, and O_EXCL is absent, so the open silently uses a pre-planted file instead of failing. A "Shared" segment naturally lives in a shared directory such as /tmp or /dev/shm, where any local user can read the IPC payloads stored in the world-readable segment, and a pre-planted file or symlink at the path lets a local attacker win a pre-creation race or redirect the open.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
关键资源的不正确权限授予
ソース: CVE Program / CVE List V5
脆弱性タイトル
EGOR Data::SortedSet::Shared 后置链接漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
EGOR Data::SortedSet::Shared是EGOR个人开发者的一个数据集合排序共享模块。 EGOR Data::SortedSet::Shared 0.03之前版本存在安全漏洞，该漏洞源于在sortedset.h中使用open(path, O_RDWR|O_CREAT, 0666)创建世界可读的mmap备份文件，且未使用O_EXCL或O_NOFOLLOW标志，可能导致本地攻击者通过预先放置的符号链接或文件实现竞争条件攻击或重定向打开操作。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| EGOR | Data::SortedSet::Shared | 0 ~ 0.03 | - |
II. CVE-2026-65062の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-65062のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-65062 厂商页面 (1)
CVE-2026-65062 其他参考 (1)
Same Patch Batch · EGOR · 2026-07-21 · 23 CVEs total
| CVE-2026-59145 | Data::Intern::Shared versions before 0.02 for Perl allow an out-of-bounds read via unvalid | |
| CVE-2026-65068 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backi | |
| CVE-2026-65065 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap bac | |
| CVE-2026-65069 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backi | |
| CVE-2026-65066 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backin | |
| CVE-2026-65063 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing | |
| CVE-2026-65067 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing fi | |
| CVE-2026-65064 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing f | |
| CVE-2026-65061 | Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing fi | |
| CVE-2026-59147 | Data::DisjointSet::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ | |
| CVE-2026-59143 | Data::RoaringBitmap::Shared versions before 0.02 for Perl allow an out-of-bounds read via | |
| CVE-2026-59140 | Data::SortedSet::Shared versions before 0.03 for Perl allow an out-of-bounds read via unva | |
| CVE-2026-59146 | Data::SpatialHash::Shared versions before 0.02 for Perl allow out-of-bounds reads and writ | |
| CVE-2026-59144 | Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via a | |
| CVE-2026-64613 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing fi | |
| CVE-2026-64617 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing fi | |
| CVE-2026-64615 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing fil | |
| CVE-2026-64614 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing fil | |
| CVE-2026-64616 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing f | |
| CVE-2026-59139 | Data::ReqRep::Shared versions before 0.05 for Perl allow an out-of-bounds read via an unva |
Showing 20 of 23 CVEs. View all on vendor page →
IV. 関連脆弱性
同じベンダー: EGOR
- CVE-2026-65069
Data::DisjointSet::Shared versions before 0.02 for Perl crea - CVE-2026-65068
Data::SpatialHash::Shared versions before 0.02 for Perl crea - CVE-2026-65067
Data::Intern::Shared versions before 0.02 for Perl create a - CVE-2026-65066
Data::RingBuffer::Shared versions before 0.04 for Perl creat - CVE-2026-65065
Data::RoaringBitmap::Shared versions before 0.02 for Perl cr
同じ弱点: CWE-732
- CVE-2026-61892
Weintek cMT3092X Incorrect Permission Assignment for Critica - CVE-2026-63358
FileGator privilege escalation - CVE-2026-65069
Data::DisjointSet::Shared versions before 0.02 for Perl crea - CVE-2026-65068
Data::SpatialHash::Shared versions before 0.02 for Perl crea - CVE-2026-65067
Data::Intern::Shared versions before 0.02 for Perl create a
V. CVE-2026-65062へのコメント
まだコメントはありません