The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of service (memory consumption and crash) via a crafted hash key.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Perl | — | Upgrade macOS to the latest version | Apr 5, 2017 | Mar 13, 2013 |
| Centos_linux | — | Upgrade perl-CPANPLUSUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-Compress-ZlibUpgrade perl-Log-Message-SimpleUpgrade perl-Test-HarnessUpgrade perl-Module-LoadedUpgrade perl-Archive-ExtractUpgrade perl-Parse-CPAN-MetaUpgrade perl-Archive-TarUpgrade perl-Compress-Raw-ZlibUpgrade perl-coreUpgrade perl-Digest-SHAUpgrade perl-Pod-SimpleUpgrade perl-Log-MessageUpgrade perl-Term-UIUpgrade perl-ExtUtils-ParseXSUpgrade perl-Params-CheckUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Package-ConstantsUpgrade perl-File-FetchUpgrade perl-IO-Compress-ZlibUpgrade perl-Time-HiResUpgrade perl-Module-CoreListUpgrade perl-IO-Compress-BaseUpgrade perl-IO-Compress-Bzip2Upgrade perl-ExtUtils-EmbedUpgrade perl-develUpgrade perl-parentUpgrade perl-Compress-Raw-Bzip2Upgrade perl-ExtUtils-MakeMakerUpgrade perl-suidperlUpgrade perl-Module-PluggableUpgrade perl-Module-BuildUpgrade perl-CGIUpgrade perl-Time-PieceUpgrade perl-Test-SimpleUpgrade perl-CPANUpgrade perl-IO-ZlibUpgrade perl-versionUpgrade perl-Module-Load-ConditionalUpgrade perl-libsUpgrade perl-Module-LoadUpgrade perl-IPC-Cmd | Dec 1, 2016 | Mar 13, 2013 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Mar 14, 2013 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Freebsd | — | Upgrade perlUpgrade perl-threaded | Dec 10, 2025 | Mar 10, 2013 |
| Gentoo Linux | — | Upgrade dev-lang/perl.Upgrade perl-core/Locale-Maketext. | Oct 30, 2017 | Mar 13, 2013 |
| Hpux | — | Update Perl5-64.PERL-RUN to the latest versionUpdate Perl5-32.PERL-RUN to the latest version | Aug 11, 2017 | Mar 13, 2013 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory3 | Nov 30, 2017 | Mar 13, 2013 |
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1 | May 29, 2017 | Mar 13, 2013 |
| Oracle_linux | — | Upgrade perl-Module-LoadedUpgrade perl-IO-Compress-ZlibUpgrade perl-Test-SimpleUpgrade perl-Module-BuildUpgrade perl-Pod-SimpleUpgrade perl-Module-Load-ConditionalUpgrade perl-CPANUpgrade perl-versionUpgrade perl-Module-LoadUpgrade perl-Compress-ZlibUpgrade perl-IO-Compress-BaseUpgrade perl-ExtUtils-ParseXSUpgrade perl-suidperlUpgrade perl-develUpgrade perl-Test-HarnessUpgrade perl-Compress-Raw-Bzip2Upgrade perl-libsUpgrade perl-Module-PluggableUpgrade perl-IO-ZlibUpgrade perl-Digest-SHAUpgrade perl-IPC-CmdUpgrade perlUpgrade perl-Params-CheckUpgrade perl-File-FetchUpgrade perl-Compress-Raw-ZlibUpgrade perl-Log-MessageUpgrade perl-Object-AccessorUpgrade perl-Time-HiResUpgrade perl-CGIUpgrade perl-Module-CoreListUpgrade perl-CPANPLUSUpgrade perl-Term-UIUpgrade perl-Archive-TarUpgrade perl-Parse-CPAN-MetaUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-parentUpgrade perl-Pod-EscapesUpgrade perl-Archive-ExtractUpgrade perl-IO-Compress-Bzip2Upgrade perl-ExtUtils-MakeMakerUpgrade perl-core | Oct 16, 2024 | Mar 12, 2013 |
| Suse | — | Upgrade perl-x86Upgrade perl-32bitUpgrade perl-docUpgrade perl-debugsourceUpgrade perlUpgrade perl-base-x86Upgrade perl-base-debuginfo-32bitUpgrade perl-debuginfoUpgrade sle-sdk-releaseUpgrade perl-debuginfo-x86Upgrade perl-base-debuginfoUpgrade perl-baseUpgrade perl-debuginfo-32bitUpgrade perl-base-debuginfo-x86Upgrade perl-base-32bitUpgrade perl-64bit | Feb 17, 2015 | Mar 13, 2013 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Mar 14, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub