Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-Module-LoadedUpgrade perl-ExtUtils-InstallUpgrade perl-libsUpgrade perl-CPANUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-macros | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Apply Apple macOS Security Update 2019-002 High Sierra | Mar 26, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-Object-AccessorUpgrade perl-debuginfoUpgrade perlUpgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-InstallUpgrade perl-testsUpgrade perl-develUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-Module-LoadedUpgrade perl-Module-CoreListUpgrade perl-CPAN | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-develUpgrade perl-libs | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perlUpgrade perl-macrosUpgrade perl-coreUpgrade perl-libsUpgrade perl-devel | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-macrosUpgrade perl-develUpgrade perl-coreUpgrade perlUpgrade perl-libs | Feb 15, 2019 | Dec 7, 2018 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-Pod-EscapesUpgrade perl-libsUpgrade perl-testsUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-InstallUpgrade perl-Module-LoadedUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-Object-AccessorUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-macrosUpgrade perl-IO-ZlibUpgrade perl-coreUpgrade perl-develUpgrade perl-Time-Piece | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-CPANUpgrade perl-testsUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-libsNo solution existsUpgrade perl-IO-ZlibUpgrade perl-Time-PieceUpgrade perl-Object-AccessorUpgrade perl-Pod-EscapesUpgrade perl-Module-CoreListUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perlUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-LoadedUpgrade perl-coreUpgrade perl-debuginfoUpgrade perl-macros | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-core-DB_FileUpgrade perl-32bitUpgrade perl-docUpgrade perlUpgrade perl-baseUpgrade perl-base-32bit | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub