Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-ExtUtils-InstallUpgrade perl-develUpgrade perl-Module-LoadedUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-CPANUpgrade perl-testsUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-SimpleUpgrade perlUpgrade perl-core | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Apply Apple macOS Security Update 2019-002 High Sierra | Mar 26, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perlUpgrade perl-debuginfoUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-InstallUpgrade perl-testsUpgrade perl-Module-LoadedUpgrade perl-CPANUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-Module-CoreListUpgrade perl-devel | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-develUpgrade perl-libsUpgrade perl-coreUpgrade perlUpgrade perl-macros | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-develUpgrade perl-libsUpgrade perlUpgrade perl-macrosUpgrade perl-core | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perlUpgrade perl-libsUpgrade perl-coreUpgrade perl-develUpgrade perl-macros | Feb 15, 2019 | Dec 7, 2018 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-testsUpgrade perl-libsUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-InstallUpgrade perl-CPANUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-Time-PieceUpgrade perl-develUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perl-core | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-testsUpgrade perl-CPANUpgrade perl-develNo solution existsUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-Module-CoreListUpgrade perl-Object-AccessorUpgrade perl-Pod-EscapesUpgrade perl-coreUpgrade perl-Module-LoadedUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilderUpgrade perlUpgrade perl-Locale-Maketext-Simple | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-baseUpgrade perl-base-32bitUpgrade perlUpgrade perl-core-DB_FileUpgrade perl-docUpgrade perl-32bit | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub