CVE-2017-20230

CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow

Vendor Nwclark
Product Storable
Weakness CWE-121
Published April 21, 2026
Last update April 21, 2026

CVSS base score

What the vulnerability does

01Description

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.

Key dates

02Disclosure timeline

April 21, 2026 CVE published
April 21, 2026 Record updated