Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-Object-AccessorUpgrade perl-coreUpgrade perl-Locale-Maketext-SimpleUpgrade perlUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-Module-CoreListUpgrade perl-macrosUpgrade perl-ExtUtils-InstallUpgrade perl-libsUpgrade perl-CPANUpgrade perl-testsUpgrade perl-develUpgrade perl-Module-LoadedUpgrade perl-IO-Zlib | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Apply OS X security update 2019-002 High SierraUpgrade macOS to the latest version | Mar 26, 2019 | Dec 7, 2018 |
| Centos_linux | — | Upgrade perl-testsUpgrade perl-CPANUpgrade perl-libsUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-InstallUpgrade perl-Module-LoadedUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-macrosUpgrade perl-Package-ConstantsUpgrade perl-Pod-EscapesUpgrade perlUpgrade perl-coreUpgrade perl-ExtUtils-CBuilderUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-Piece | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perlUpgrade perl-macrosUpgrade perl-coreUpgrade perl-libsUpgrade perl-devel | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-libsUpgrade perl-devel | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perlUpgrade perl-libsUpgrade perl-coreUpgrade perl-develUpgrade perl-macros | Feb 15, 2019 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-macrosUpgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-Object-AccessorUpgrade perlUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-Time-PieceUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-ExtUtils-InstallUpgrade perl-libsUpgrade perl-Pod-EscapesUpgrade perl-testsUpgrade perl-Module-Loaded | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-testsUpgrade perl-develNo solution existsUpgrade perl-CPANUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-Pod-EscapesUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perlUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-Locale-Maketext-Simple | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-32bitUpgrade perl-docUpgrade perl-core-DB_FileUpgrade perl-baseUpgrade perl-base-32bitUpgrade perl | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub