CVE-2011-3597: Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers t...

Security readout for executives and security teams

This issue affects older Perl Digest module versions. If an application lets untrusted users influence Digest object creation, the module could evaluate attacker-controlled input and run commands. The public bundle does not show active exploitation or a CVSS score, but the impact can be serious where the vulnerable code path is reachable. Most likely exposure is legacy systems, appliances, or applications using Perl Digest before 1.17 through OS packages or bundled CPAN modules. Risk is highest where web, API, or automation inputs can influence Digest algorithm selection or constructor arguments. Treat as a high-priority legacy exposure review rather than an emergency internet-wide incident. Systems still carrying pre-1.17 Digest should be patched or retired, especially if they process external input through Perl applications. Mitigation focus: Update Perl Digest to version 1.17 or vendor-fixed packages.; Check Red Hat, Ubuntu, Mandriva, IBM AIX, and Juniper advisories where applicable.; Replace bundled or vendored vulnerable CPAN modules in applications and containers..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.