Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-5q5y-jrh7-wqdy

Summary Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.

Aliases

alias	CVE-2016-2381

Fixed_packages

url pkg:deb/debian/perl@5.14.2-21%2Bdeb7u3

purl pkg:deb/debian/perl@5.14.2-21%2Bdeb7u3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.14.2-21%252Bdeb7u3

url	pkg:deb/debian/perl@5.22.1-8?distro=trixie
purl	pkg:deb/debian/perl@5.22.1-8?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.22.1-8%3Fdistro=trixie

url pkg:deb/debian/perl@5.32.1-4%2Bdeb11u3?distro=trixie

purl pkg:deb/debian/perl@5.32.1-4%2Bdeb11u3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-zkfz-2wh8-77cg

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.32.1-4%252Bdeb11u3%3Fdistro=trixie

url pkg:deb/debian/perl@5.36.0-7%2Bdeb12u3?distro=trixie

purl pkg:deb/debian/perl@5.36.0-7%2Bdeb12u3?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-zkfz-2wh8-77cg

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.36.0-7%252Bdeb12u3%3Fdistro=trixie

url	pkg:deb/debian/perl@5.40.1-6?distro=trixie
purl	pkg:deb/debian/perl@5.40.1-6?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-6%3Fdistro=trixie

url	pkg:deb/debian/perl@5.40.1-7?distro=trixie
purl	pkg:deb/debian/perl@5.40.1-7?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.40.1-7%3Fdistro=trixie

url	pkg:ebuild/dev-lang/perl@5.22.3_rc4
purl	pkg:ebuild/dev-lang/perl@5.22.3_rc4
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/perl@5.22.3_rc4

Affected_packages

url pkg:deb/debian/perl@5.004.04-6

purl pkg:deb/debian/perl@5.004.04-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.004.04-6

url pkg:deb/debian/perl@5.004.04-7.0.1

purl pkg:deb/debian/perl@5.004.04-7.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.004.04-7.0.1

url pkg:deb/debian/perl@5.004.05-2

purl pkg:deb/debian/perl@5.004.05-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.004.05-2

url pkg:deb/debian/perl@5.6.1-8.9

purl pkg:deb/debian/perl@5.6.1-8.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.6.1-8.9

url pkg:deb/debian/perl@5.8.4-8sarge6

purl pkg:deb/debian/perl@5.8.4-8sarge6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.4-8sarge6

url pkg:deb/debian/perl@5.8.8-7

purl pkg:deb/debian/perl@5.8.8-7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.8-7

url pkg:deb/debian/perl@5.8.8-7etch6

purl pkg:deb/debian/perl@5.8.8-7etch6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.8.8-7etch6

url pkg:deb/debian/perl@5.10.0-19lenny5

purl pkg:deb/debian/perl@5.10.0-19lenny5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.10.0-19lenny5

url pkg:deb/debian/perl@5.10.1-17squeeze6

purl pkg:deb/debian/perl@5.10.1-17squeeze6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-n1jt-6svb-x3e3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/perl@5.10.1-17squeeze6

url pkg:rpm/redhat/perl-main@1.03-524?arch=hum1

purl pkg:rpm/redhat/perl-main@1.03-524?arch=hum1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-5q5y-jrh7-wqdy

vulnerability	VCID-6sya-vave-ckgn

vulnerability	VCID-dx7d-j7be-93e7

vulnerability	VCID-e2fg-jp9e-4kg7

vulnerability	VCID-ekp1-w5tb-tybq

vulnerability	VCID-ktn9-tw2d-37ex

vulnerability	VCID-w237-wtg2-dqf3

vulnerability	VCID-xvu2-qdne-s7eu

resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/perl-main@1.03-524%3Farch=hum1

References

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2381.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-2381.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2016-2381

reference_id

reference_type

scores

value	0.27444
scoring_system	epss
scoring_elements	0.96511
published_at	2026-06-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2016-2381

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2381

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1309214
reference_id	1309214
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1309214

reference_url	https://security.gentoo.org/glsa/201701-75
reference_id	GLSA-201701-75
reference_type
scores
url	https://security.gentoo.org/glsa/201701-75

reference_url	https://access.redhat.com/errata/RHSA-2026:6206
reference_id	RHSA-2026:6206
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2026:6206

Weaknesses

cwe_id	20
name	Improper Input Validation
description	The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Exploits

Severity_range_score null

Exploitability 0.5

Weighted_severity 0.0

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5q5y-jrh7-wqdy

Vulnerability Instance