perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the current working directory for certain output files and does not have a symlink-attack protection mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim cannot delete.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - perltidy through 20160302, as used by perlcritic, check-all-the-things, and other software, relies on the     current working directory for certain output files and does not have a symlink-attack protection     mechanism, which allows local users to overwrite arbitrary files by creating a symlink, as demonstrated by     creating a perltidy.ERR symlink that the victim cannot delete. (CVE-2016-10374)

Note that Nessus relies on the presence of the package as reported by the vendor.

Cumulative bug-fix, enhancement and security update, including fix for CVE-2016-10374: perltidy relies on the current working directory for certain output files and did not have a symlink-attack protection mechanism, which allowed local users to overwrite arbitrary files by creating a symlink, as demonstrated by creating a perltidy.ERR symlink that the victim could not delete.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
219492	Linux Distros Unpatched Vulnerability : CVE-2016-10374	Nessus	Misc.	medium
101718	Fedora 26 : perltidy (2017-c76259ddea)	Nessus	Fedora Local Security Checks	medium
100741	Fedora 24 : perltidy (2017-1f11501a9f)	Nessus	Fedora Local Security Checks	medium
100732	Fedora 25 : perltidy (2017-a3c7d077c7)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2016-10374

medium

Tenable Plugins

medium

medium

medium

medium