Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Dec 7, 2018 | Dec 7, 2018 |
| Amazon Linux Ami 2 | — | Upgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-InstallUpgrade perl-CPANUpgrade perl-develUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-SimpleUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-Time-PieceUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilderUpgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-Module-CoreList | Apr 27, 2020 | Dec 7, 2018 |
| Amazon_linux | — | Upgrade perl | Apr 1, 2019 | Nov 29, 2018 |
| Apple Osx Perl | — | Apply Apple macOS Security Update 2019-002 High Sierra | Mar 26, 2019 | Mar 25, 2019 |
| Centos_linux | — | Upgrade perl-CPANUpgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-InstallUpgrade perl-libsUpgrade perl-IO-ZlibUpgrade perl-Module-LoadedUpgrade perl-develUpgrade perl-Time-PieceUpgrade perl-debuginfoUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-EmbedUpgrade perl-Pod-EscapesUpgrade perl-Object-AccessorUpgrade perlUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-coreUpgrade perl-macros | Jan 25, 2019 | Nov 29, 2018 |
| Debian | — | Upgrade perl | Nov 30, 2018 | Nov 29, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perlUpgrade perl-coreUpgrade perl-macrosUpgrade perl-develUpgrade perl-libs | Jul 23, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-libsUpgrade perl-develUpgrade perl-macrosUpgrade perl-coreUpgrade perl | Mar 27, 2019 | Dec 7, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perlUpgrade perl-libsUpgrade perl-coreUpgrade perl-macrosUpgrade perl-devel | Feb 15, 2019 | Dec 7, 2018 |
| Mcafee Web Gateway | — | Upgrade to the latest version of Web Gateway | Sep 23, 2026 | Dec 7, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-0.175.3.36.0.12.0 on Solaris 11.3Upgrade runtime/perl-522 to version 5.22.1.1-11.4.6.0.1.2.0 on Solaris 11.4 | Feb 20, 2019 | Dec 7, 2018 |
| Oracle_linux | — | Upgrade perl-Time-PieceUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Object-AccessorUpgrade perl-macrosUpgrade perl-coreUpgrade perl-Package-ConstantsUpgrade perl-testsUpgrade perl-Pod-EscapesUpgrade perl-libsUpgrade perl-Module-LoadedUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-CoreListUpgrade perl-CPAN | Jan 22, 2019 | Nov 29, 2018 |
| Redhat_linux | — | Upgrade perl-testsUpgrade perl-libsNo solution existsUpgrade perl-CPANUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-CBuilderUpgrade perl-debuginfoUpgrade perl-Time-PieceUpgrade perl-Object-AccessorUpgrade perl-Package-ConstantsUpgrade perl-Module-LoadedUpgrade perl-coreUpgrade perl-Module-CoreListUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-EmbedUpgrade perlUpgrade perl-macros | Jan 22, 2019 | Dec 7, 2018 |
| Suse | — | Upgrade perl-baseUpgrade perl-base-32bitUpgrade perlUpgrade perl-32bitUpgrade perl-docUpgrade perl-core-DB_File | Dec 23, 2018 | Nov 29, 2018 |
| Ubuntu | — | Upgrade perl | Dec 7, 2018 | Nov 29, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub