A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5.40Upgrade perl5-develUpgrade perl5.38 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-Config-ExtensionsUpgrade perl-ExtUtils-MiniperlUpgrade perl-Hash-UtilUpgrade perlUpgrade perl-localeUpgrade perl-overloadingUpgrade perl-TestUpgrade perl-FileCacheUpgrade perl-DynaLoaderUpgrade perl-NDBM_FileUpgrade perl-I18N-LanginfoUpgrade perl-libUpgrade perl-POSIXUpgrade perl-MemoizeUpgrade perl-mroUpgrade perl-Sys-HostnameUpgrade perl-subsUpgrade perl-libsUpgrade perl-User-pwentUpgrade perl-AutoSplitUpgrade perl-phUpgrade perl-debuggerUpgrade perl-deprecateUpgrade perl-sigtrapUpgrade perl-File-DosGlobUpgrade perl-GDBM_FileUpgrade perl-develUpgrade perl-Devel-SelfStubberUpgrade perl-sortUpgrade perl-EnglishUpgrade perl-I18N-LangTagsUpgrade perl-encoding-warningsUpgrade perl-Term-ReadLineUpgrade perl-Pod-HtmlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Math-ComplexUpgrade perl-docUpgrade perl-Pod-FunctionsUpgrade perl-SelectSaverUpgrade perl-ODBM_FileUpgrade perl-Tie-FileUpgrade perl-filetestUpgrade perl-NEXTUpgrade perl-Unicode-UCDUpgrade perl-utilsUpgrade perl-FileHandleUpgrade perl-ExtUtils-ConstantUpgrade perl-fieldsUpgrade perl-ErrnoUpgrade perl-File-CopyUpgrade perl-File-BasenameUpgrade perl-Devel-PeekUpgrade perl-Getopt-StdUpgrade perl-BUpgrade perl-File-CompareUpgrade perl-Term-CompleteUpgrade perl-Search-DictUpgrade perl-vmsishUpgrade perl-DirHandleUpgrade perl-interpreterUpgrade perl-I18N-CollateUpgrade perl-ThreadUpgrade perl-openUpgrade perl-DBM_FilterUpgrade perl-AutoLoaderUpgrade perl-TimeUpgrade perl-SymbolUpgrade perl-SafeUpgrade perl-meta-notationUpgrade perl-IPC-Open3Upgrade perl-File-statUpgrade perl-File-FindUpgrade perl-FcntlUpgrade perl-diagnosticsUpgrade perl-macrosUpgrade perl-libnetcfgUpgrade perl-lessUpgrade perl-ifUpgrade perl-ExtUtils-EmbedUpgrade perl-blibUpgrade perl-Text-AbbrevUpgrade perl-DumpvalueUpgrade perl-Attribute-HandlersUpgrade perl-Thread-SemaphoreUpgrade perl-overloadUpgrade perl-FindBinUpgrade perl-baseUpgrade perl-NetUpgrade perl-IOUpgrade perl-TieUpgrade perl-Class-StructUpgrade perl-Time-PieceUpgrade perl-Hash-Util-FieldHashUpgrade perl-varsUpgrade perl-OpcodeUpgrade perl-autouseUpgrade perl-Tie-MemoizeUpgrade perl-SelfLoaderUpgrade perl-Module-LoadedUpgrade perl-Benchmark | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-overloadingUpgrade perl-B-debuginfoUpgrade perl-Config-ExtensionsUpgrade perl-ExtUtils-MiniperlUpgrade perl-Hash-UtilUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-libUpgrade perl-Devel-SelfStubberUpgrade perl-I18N-LanginfoUpgrade perl-libsUpgrade perl-NEXTUpgrade perl-Thread-SemaphoreUpgrade perl-AutoLoaderUpgrade perl-DBM_FilterUpgrade perl-Text-AbbrevUpgrade perl-varsUpgrade perl-POSIXUpgrade perl-develUpgrade perl-AutoSplitUpgrade perl-ODBM_File-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-docUpgrade perl-FileCacheUpgrade perl-TestUpgrade perl-debugsourceUpgrade perl-POSIX-debuginfoUpgrade perl-SelectSaverUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-NDBM_FileUpgrade perl-FindBinUpgrade perl-encoding-warningsUpgrade perl-Attribute-HandlersUpgrade perl-SelfLoaderUpgrade perl-DumpvalueUpgrade perl-DynaLoaderUpgrade perl-File-DosGlobUpgrade perl-File-DosGlob-debuginfoUpgrade perl-utilsUpgrade perl-Search-DictUpgrade perl-blibUpgrade perl-Class-StructUpgrade perl-Pod-FunctionsUpgrade perl-GDBM_FileUpgrade perl-Math-ComplexUpgrade perl-I18N-CollateUpgrade perl-sigtrapUpgrade perl-OpcodeUpgrade perl-Devel-PeekNo solution existsUpgrade perl-subsUpgrade perl-ErrnoUpgrade perl-File-FindUpgrade perl-File-CopyUpgrade perl-deprecateUpgrade perl-Opcode-debuginfoUpgrade perl-phUpgrade perl-debuggerUpgrade perl-TieUpgrade perl-fieldsUpgrade perl-Time-Piece-debuginfoUpgrade perl-FileHandleUpgrade perl-sortUpgrade perl-ExtUtils-ConstantUpgrade perl-EnglishUpgrade perl-Time-PieceUpgrade perl-TimeUpgrade perl-Hash-Util-debuginfoUpgrade perl-Term-CompleteUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-Tie-MemoizeUpgrade perl-ifUpgrade perl-filetestUpgrade perl-Pod-HtmlUpgrade perl-Term-ReadLineUpgrade perl-openUpgrade perl-ThreadUpgrade perl-Module-LoadedUpgrade perl-lessUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-ODBM_FileUpgrade perl-overloadUpgrade perl-debuginfoUpgrade perl-IOUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-LangTagsUpgrade perl-GDBM_File-debuginfoUpgrade perl-autouseUpgrade perl-ExtUtils-EmbedUpgrade perl-User-pwentUpgrade perl-libs-debuginfoUpgrade perl-FcntlUpgrade perl-mro-debuginfoUpgrade perl-macrosUpgrade perl-SafeUpgrade perl-Getopt-StdUpgrade perl-DirHandleUpgrade perl-localeUpgrade perl-libnetcfgUpgrade perl-MemoizeUpgrade perl-interpreterUpgrade perl-BenchmarkUpgrade perl-File-statUpgrade perl-Tie-FileUpgrade perl-BUpgrade perl-diagnosticsUpgrade perl-IO-debuginfoUpgrade perl-IPC-Open3Upgrade perl-baseUpgrade perl-vmsishUpgrade perl-mroUpgrade perl-File-BasenameUpgrade perl-NetUpgrade perl-SymbolUpgrade perl-meta-notationUpgrade perlUpgrade perl-interpreter-debuginfoUpgrade perl-File-CompareUpgrade perl-Unicode-UCD | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-ODBM_File-debuginfoUpgrade perl-NDBM_FileUpgrade perl-OpcodeUpgrade perl-I18N-LanginfoUpgrade perl-File-DosGlobUpgrade perl-Opcode-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-libsUpgrade perl-GDBM_FileUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-develUpgrade perl-Hash-Util-FieldHashUpgrade perl-debugsourceUpgrade perl-NDBM_File-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-POSIX-debuginfoUpgrade perl-libUpgrade perl-DynaLoaderUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-POSIXUpgrade perl-B-debuginfoUpgrade perl-phUpgrade perlUpgrade perl-libs-debuginfoUpgrade perl-FcntlUpgrade perl-interpreterUpgrade perl-Time-Piece-debuginfoUpgrade perl-Time-PieceUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-IO-debuginfoUpgrade perl-Hash-UtilUpgrade perl-debuginfoUpgrade perl-BUpgrade perl-Fcntl-debuginfoUpgrade perl-ODBM_FileUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-ErrnoUpgrade perl-IOUpgrade perl-GDBM_File-debuginfoUpgrade perl-mro | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub