Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Jul 31, 2018 | Apr 17, 2018 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Oct 31, 2018 | Apr 17, 2018 |
| Debian | — | Upgrade perl | Feb 19, 2019 | Apr 17, 2018 |
| Dell Powerstore Dsa2024398 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 17, 2024 |
| Dell Powerstore Dsa2024408 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Sep 26, 2024 |
| Dell Powerstore Dsa2024432 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Oct 29, 2024 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Oct 2, 2024 |
| Freebsd | — | Upgrade perl5 | Dec 10, 2025 | Apr 15, 2018 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Sep 9, 2019 | Apr 17, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-macrosUpgrade perl-coreUpgrade perlUpgrade perl-libsUpgrade perl-devel | Nov 3, 2020 | Apr 17, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perlUpgrade perl-coreUpgrade perl-macrosUpgrade perl-develUpgrade perl-libs | Apr 16, 2020 | Apr 17, 2018 |
| Oracle Solaris | — | Upgrade runtime/perl-522 to version 5.22.1.1-11.4.5.0.1.1.0 on Solaris 11.4Upgrade entire/ to version 11.4-11.4.0.0.1.15.0 on Solaris 11.4 | Oct 19, 2018 | Apr 17, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 17, 2018 |
| Suse | — | Upgrade perl-docUpgrade perl-base-32bitUpgrade perl-x86Upgrade perl-Test-SimpleUpgrade perlUpgrade perl-Module-BuildUpgrade perl-baseUpgrade perl-32bit | Jun 21, 2018 | Apr 17, 2018 |
| Ubuntu | — | Upgrade perl | Apr 25, 2018 | Apr 17, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 17, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub