CVE:CVE-2016-2381
CNNVD:CNNVD-201603-004
Perl是美国程序员拉里-沃尔（Larry Wall）所研发的一种免费且功能强大的跨平台编程语言。
Perl中存在安全漏洞。攻击者可借助envp中重复的环境变量利用该漏洞绕过子进程中的taint保护机制。
solution:Upgrade perl perl to a higher version than 5.23.9,and avoid the version (,5.23.9); Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5,and avoid the version 7.5; Upgrade oracle configuration_manager to a higher version than 12.1.2.0.4,12.1.2.0.6,and avoid the version (,12.1.2.0.4),12.1.2.0.6; Upgrade oracle database_server to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c; Upgrade oracle enterprise_manager_base_platform to a higher version than 13.2.0.0.0,13.3.0.0.0,and avoid the version 13.2.0.0.0,13.3.0.0.0; Upgrade oracle timesten_in-memory_database to a higher version than 18.1.2.1.0,and avoid the version (,18.1.2.1.0); Upgrade oracle solaris to a higher version than 11.3,and avoid the version 11.3; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.10,and avoid the version 12.04,14.04,15.10