Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-debuginfoUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Package-ConstantsUpgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-EmbedUpgrade perl-Module-LoadedUpgrade perl-libsUpgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-CPANUpgrade perl-develUpgrade perl-ExtUtils-Install | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Upgrade macOS to the latest versionApply OS X security update 2019-002 High Sierra | Mar 26, 2019 | Dec 7, 2018 |
| Centos_linux | — | Upgrade perl-Object-AccessorUpgrade perl-Pod-EscapesUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perlUpgrade perl-testsUpgrade perl-CPANUpgrade perl-IO-ZlibUpgrade perl-Module-LoadedUpgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-devel | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-libsUpgrade perl-develUpgrade perlUpgrade perl-coreUpgrade perl-macros | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perlUpgrade perl-macrosUpgrade perl-coreUpgrade perl-develUpgrade perl-libs | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-coreUpgrade perl-libsUpgrade perlUpgrade perl-develUpgrade perl-macros | Feb 15, 2019 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-Package-ConstantsUpgrade perl-macrosUpgrade perl-coreUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-Object-AccessorUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-libsUpgrade perl-testsUpgrade perl-ExtUtils-CBuilderUpgrade perl-CPANUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-Install | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-testsUpgrade perl-CPANUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-ExtUtils-InstallNo solution existsUpgrade perl-ExtUtils-CBuilderUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-Module-LoadedUpgrade perl-coreUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perlUpgrade perl-Package-Constants | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perlUpgrade perl-base-32bitUpgrade perl-baseUpgrade perl-32bitUpgrade perl-docUpgrade perl-core-DB_File | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub