Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-uk68-gpxn-d3gd
Vulnerability ID VCID-uk68-gpxn-d3gd
Aliases CVE-2008-5303
Summary Multiple vulnerabilities were found in Perl, the worst of which could allow a local attacker to cause a Denial of Service condition.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
System Score Found at
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
epss 0.00028 https://api.first.org/data/v1/epss?cve=CVE-2008-5303
cvssv2 6.9 https://nvd.nist.gov/vuln/detail/CVE-2008-5303
Reference id Reference type URL
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286905
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=286922#36
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5303.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5303
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5303
http://secunia.com/advisories/32980
http://secunia.com/advisories/33314
http://secunia.com/advisories/40052
https://exchange.xforce.ibmcloud.com/vulnerabilities/47044
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6680
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9699
http://support.apple.com/kb/HT4077
http://wiki.rpath.com/Advisories:rPSA-2009-0011
http://www.debian.org/security/2008/dsa-1678
http://www.gossamer-threads.com/lists/perl/porters/233695#233695
http://www.mandriva.com/security/advisories?name=MDVSA-2010:116
http://www.openwall.com/lists/oss-security/2008/11/28/2
http://www.redhat.com/support/errata/RHSA-2010-0458.html
http://www.securityfocus.com/archive/1/500210/100/0/threaded
http://www.ubuntu.com/usn/usn-700-1
http://www.ubuntu.com/usn/usn-700-2
474217 https://bugzilla.redhat.com/show_bug.cgi?id=474217
cpe:2.3:a:perl:file\:\:path:1.08:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:perl:file\:\:path:1.08:*:*:*:*:*:*:*
cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:perl:perl:5.8.8:*:*:*:*:*:*:*
CVE-2008-5303 https://nvd.nist.gov/vuln/detail/CVE-2008-5303
GLSA-201311-17 https://security.gentoo.org/glsa/201311-17
RHSA-2010:0458 https://access.redhat.com/errata/RHSA-2010:0458
USN-700-1 https://usn.ubuntu.com/700-1/
No exploits are available.
Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2008-5303
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.07972
EPSS Score 0.00028
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:10:21.272473+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/201311-17 38.0.0