Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-libsUpgrade perl-Module-LoadedUpgrade perl-develUpgrade perl-CPANUpgrade perl-ExtUtils-InstallUpgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-Package-ConstantsUpgrade perl-macrosUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-CBuilderUpgrade perl-coreUpgrade perlUpgrade perl-ExtUtils-EmbedUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Pod-EscapesUpgrade perl-debuginfoUpgrade perl-Time-Piece | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Upgrade macOS to the latest versionApply OS X security update 2019-002 High Sierra | Mar 26, 2019 | Dec 7, 2018 |
| Centos_linux | — | Upgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-CPANUpgrade perl-develUpgrade perl-Module-LoadedUpgrade perl-Time-PieceUpgrade perl-Object-AccessorUpgrade perl-coreUpgrade perlUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-debuginfo | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-libsUpgrade perl-develUpgrade perlUpgrade perl-macrosUpgrade perl-core | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-develUpgrade perl-libsUpgrade perl-coreUpgrade perlUpgrade perl-macros | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-develUpgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-libs | Feb 15, 2019 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-macrosUpgrade perl-Object-AccessorUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-coreUpgrade perl-develUpgrade perl-Time-PieceUpgrade perl-Package-ConstantsUpgrade perl-IO-ZlibUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-testsUpgrade perl-CPAN | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-CPANNo solution existsUpgrade perl-libsUpgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-LoadedUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-ExtUtils-CBuilder | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-baseUpgrade perl-base-32bitUpgrade perlUpgrade perl-core-DB_FileUpgrade perl-32bitUpgrade perl-doc | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub