Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 30, 2017 | Dec 17, 2012 |
| Centos_linux | — | Upgrade perl-Test-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-Term-UIUpgrade perl-Archive-TarUpgrade perl-Log-MessageUpgrade perl-Time-HiResUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-Load-ConditionalUpgrade perl-Test-HarnessUpgrade perl-File-FetchUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Compress-ZlibUpgrade perl-Archive-ExtractUpgrade perl-IO-Compress-BaseUpgrade perl-Parse-CPAN-MetaUpgrade perl-CPANUpgrade perl-CGIUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-develUpgrade perl-Package-ConstantsUpgrade perl-Module-CoreListUpgrade perl-IPC-CmdUpgrade perl-versionUpgrade perlUpgrade perl-Params-CheckUpgrade perl-CPANPLUSUpgrade perl-Pod-SimpleUpgrade perl-coreUpgrade perl-IO-ZlibUpgrade perl-Compress-Raw-ZlibUpgrade perl-ExtUtils-ParseXSUpgrade perl-Digest-SHAUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Module-LoadUpgrade perl-Module-PluggableUpgrade perl-Module-BuildUpgrade perl-Module-LoadedUpgrade perl-libsUpgrade perl-suidperlUpgrade perl-IO-Compress-ZlibUpgrade perl-parentUpgrade perl-IO-Compress-Bzip2 | Dec 1, 2016 | Dec 17, 2012 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Dec 18, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade perl-core/Locale-Maketext.Upgrade dev-lang/perl. | Oct 30, 2017 | Dec 17, 2012 |
| Oracle Solaris | — | Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2 | May 29, 2017 | Dec 17, 2012 |
| Oracle_linux | — | Upgrade perl-Archive-TarUpgrade perl-Compress-ZlibUpgrade perl-CPANPLUSUpgrade perlUpgrade perl-Digest-SHAUpgrade perl-Test-HarnessUpgrade perl-ExtUtils-ParseXSUpgrade perl-Module-LoadUpgrade perl-libsUpgrade perl-Module-PluggableUpgrade perl-develUpgrade perl-IPC-CmdUpgrade perl-Module-LoadedUpgrade perl-IO-ZlibUpgrade perl-Pod-SimpleUpgrade perl-Test-SimpleUpgrade perl-CPANUpgrade perl-versionUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IO-Compress-BaseUpgrade perl-Module-Load-ConditionalUpgrade perl-Module-BuildUpgrade perl-ExtUtils-EmbedUpgrade perl-CGIUpgrade perl-IO-Compress-ZlibUpgrade perl-Compress-Raw-ZlibUpgrade perl-coreUpgrade perl-Parse-CPAN-MetaUpgrade perl-IO-Compress-Bzip2Upgrade perl-Time-HiResUpgrade perl-Archive-ExtractUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-MakeMakerUpgrade perl-suidperlUpgrade perl-Log-MessageUpgrade perl-Object-AccessorUpgrade perl-Params-CheckUpgrade perl-parentUpgrade perl-File-FetchUpgrade perl-Term-UIUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-Log-Message-SimpleUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-CBuilder | Oct 16, 2024 | Dec 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2012 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 18, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub