Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-CPANUpgrade perl-develUpgrade perl-libsUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Pod-EscapesUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-Object-AccessorUpgrade perlUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-CBuilderUpgrade perl-Package-ConstantsUpgrade perl-core | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Apply Apple macOS Security Update 2019-002 High Sierra | Mar 26, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-ExtUtils-InstallUpgrade perl-develUpgrade perl-CPANUpgrade perl-testsUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perlUpgrade perl-ExtUtils-EmbedUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perl-coreUpgrade perl-Time-PieceUpgrade perl-Locale-Maketext-SimpleUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilderUpgrade perl-Object-Accessor | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-macrosUpgrade perl-coreUpgrade perlUpgrade perl-develUpgrade perl-libs | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-libsUpgrade perl-devel | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-macrosUpgrade perl-develUpgrade perlUpgrade perl-libsUpgrade perl-core | Feb 15, 2019 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-testsUpgrade perl-Pod-EscapesUpgrade perl-CPANUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-Module-CoreListUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-develUpgrade perl-Object-AccessorUpgrade perl-IO-ZlibUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-CPANUpgrade perl-testsUpgrade perl-ExtUtils-InstallUpgrade perl-libsNo solution existsUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-macrosUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perl-debuginfoUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perl-Time-PieceUpgrade perl-Module-LoadedUpgrade perl-Object-AccessorUpgrade perl-coreUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-Constants | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-base-32bitUpgrade perl-baseUpgrade perlUpgrade perl-docUpgrade perl-core-DB_FileUpgrade perl-32bit | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub