CVE catalog

CVE-2008-1532

perlbal: CVE-2008-1532

[CVE catalog]

Severity
Low
Source
[NVD] · [CVE record]
EPSS
2.08% · Oct 25, 2026

Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianperlbalsid1.80-4not affected
Debianperlbaltrixie1.80-4not affected
Debianperlbalbookworm1.80-4not affected

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
DebianperlbalsourcesidNot affectedunimportantNot reportedNot reported
DebianperlbalsourcetrixieNot affectedunimportantNot reportedNot reported
DebianperlbalsourcebookwormNot affectedunimportantNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libperlbal-perl]Not affected

    Source package: [perlbal]

    Details (2)
    • 1.80-4 · all · bookworm

      Not affected

      dsa · perlbal · debian · bookworm

    • 1.80-4 · all · bookworm

      Not affected

      dsa · perlbal · debian · bookworm

  • [perlbal]Not affected
    Details (2)
    • 1.80-4 · all · bookworm

      Not affected

      dsa · perlbal · debian · bookworm

    • 1.80-4 · all · bookworm

      Not affected

      dsa · perlbal · debian · bookworm

Observed:

References