Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 8.4
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Perl | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Nov 7, 2007 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Nov 7, 2007 |
| Freebsd | — | Upgrade perlUpgrade perl-threaded | Dec 10, 2025 | Nov 6, 2007 |
| Gentoo Linux | — | Upgrade app-emulation/emul-linux-x86-baselibs.Upgrade dev-lang/perl. | Oct 30, 2017 | Nov 7, 2007 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory | Nov 30, 2017 | Nov 7, 2007 |
| Oracle_linux | — | Upgrade perl-suidperlUpgrade perl | Oct 16, 2024 | Nov 7, 2007 |
| Suse | — | Upgrade perl-32bitUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-baseUpgrade perlUpgrade perl-x86Upgrade perl-docUpgrade perl-base-32bit | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade libperl5.8 | Nov 8, 2024 | Nov 7, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub