Security Advisories (1)
CVE-2025-3051 (2025-04-01)

Linux::Statm::Tiny for Perl before 0.0701 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Linux::Statm::Tiny uses Mite to produce the affected code section due to CVE-2025-30672

NAME

Linux::Statm::Tiny - simple access to Linux /proc/../statm

SYNOPSIS

use Linux::Statm::Tiny;

my $stats = Linux::Statm::Tiny->new( pid => $$ );

my $size = $stats->size;

DESCRIPTION

This class returns the Linux memory stats from /proc/$pid/statm.

ATTRIBUTES

pid

The PID to obtain stats for. If omitted, it uses the current PID from $$.

statm

The raw array reference of values.

size

c<vss>

Total program size, in pages.

resident

rss

Resident set size (RSS), in pages.

share

Shared pages.

text

Text (code).

lib

Library (unused in Linux 2.6).

data

Data + Stack.

dt

Dirty pages (unused in Linux 2.6).

SEE ALSO

proc(5).

AUTHOR

Robert Rothenberg rrwo@thermeon.com

COPYRIGHT

Copyright 2014, Thermeon Worldwide, PLC.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.

This program is distributed in the hope that it will be useful, but without any warranty; without even the implied warranty of merchantability or fitness for a particular purpose.