{"affected":[{"defaultStatus":"unaffected","ecosystem":"cpan","packageName":"RRD-CGI-Image","product":"","source":"CNA: CPANSec","vendor":"","versions":[{"lessThanOrEqual":"0.01","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-123776","cwes":["CWE-1287"],"description":"RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting \"tz\" to tzset(), , so a FIFO or device path blocks the CGI process.\n\nThe normalize_params method sends any query key matching /tz/i to tz(), which sets $ENV{TZ} to that value, with no validation. It then calls tzset(). glibc treats a TZ value starting with / or : as a file path and opens it, so a value naming a FIFO or a blocking device stalls the process inside tzset().","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1794052278541,"publishedAt":1794052278541,"references":[{"source":"CNA: CPANSec","tags":["vendor-advisory","issue-tracking","patch"],"url":"https://rt.cpan.org/Ticket/Display.html?id=182627"},{"source":"CNA: CPANSec","tags":["technical-description"],"url":"https://man7.org/linux/man-pages/man3/tzset.3.html"},{"source":"CNA: CPANSec","tags":["patch"],"url":"https://security.metacpan.org/patches/R/RRD-CGI-Image/0.01/CVE-2026-123776-r1.patch"}],"remediation":[{"kind":"fix","source":"CNA: CPANSec","text":"Apply the patch."},{"kind":"fix","source":"CNA: CPANSec","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://rt.cpan.org/Ticket/Display.html?id=182627"},{"kind":"fix","source":"CNA: CPANSec","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://security.metacpan.org/patches/R/RRD-CGI-Image/0.01/CVE-2026-123776-r1.patch"}],"revision":"138416caa9a643b795b7695cd7fced86ab25211de3a29f3cc917e6bd1fa091fe","sources":[{"modifiedAt":1794052278541,"name":"CNA: CPANSec","retrievedAt":1794053412317,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123776"}],"ssvc":null,"status":"published","title":"RRD::CGI::Image versions through 0.01 for Perl pass CGI query parameters containting \"tz\" to tzset(), , so a FIFO or device path blocks the CGI process","updatedAt":1794053412317}