CVE catalog

CVE-2013-7135

libproc-daemon-perl: CVE-2013-7135

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.38% · Oct 25, 2026

The Proc::Daemon module 0.14 for Perl uses world-writable permissions for a file that stores a process ID, which allows local users to have an unspecified impact by modifying this file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibproc-daemon-perlsid0.23-2fixed
Debianlibproc-daemon-perlforky0.23-2fixed
Debianlibproc-daemon-perltrixie0.23-2fixed
Debianlibproc-daemon-perlbookworm0.23-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibproc-daemon-perlsourcesid0.14-2lowNot reported[732283]
Debianlibproc-daemon-perlsourceforky0.14-2lowNot reported[732283]
Debianlibproc-daemon-perlsourcetrixie0.14-2lowNot reported[732283]
Debianlibproc-daemon-perlsourcebookworm0.14-2lowNot reported[732283]

[Debian bug #732283]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • Details (2)
    • 0.23-2 · all · bookworm

      Fixed · Fixed: 0.14-2

      dsa · libproc-daemon-perl · debian · bookworm; dsa · libproc-daemon-perl · debian · 12

    • 0.23-2 · all · bookworm

      Fixed · Fixed: 0.14-2

      dsa · libproc-daemon-perl · debian · bookworm; dsa · libproc-daemon-perl · debian · 12

[Debian 13 (Trixie)]

  • Details (2)
    • 0.23-2 · all · trixie

      Fixed · Fixed: 0.14-2

      dsa · libproc-daemon-perl · debian · 13

    • 0.23-2 · all · trixie

      Fixed · Fixed: 0.14-2

      dsa · libproc-daemon-perl · debian · 13

Observed:

References