Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-develUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-openUpgrade perl-utilsUpgrade perlUpgrade perl-interpreterUpgrade perl-libsUpgrade perl-tests | May 4, 2022 | Jun 5, 2020 |
| Alpine Linux | — | Upgrade perl | Jun 19, 2020 | Jun 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perl-Object-AccessorUpgrade perl-coreUpgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IO-ZlibUpgrade perl-Package-ConstantsUpgrade perl-develUpgrade perl-libsUpgrade perl-Module-LoadedUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-Time-PieceUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perlUpgrade perl-CPANUpgrade perl-ExtUtils-Install | Feb 22, 2021 | Jun 5, 2020 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Mar 17, 2021 | Jun 5, 2020 |
| Centos_linux | — | Upgrade perl-Object-AccessorUpgrade perl-openUpgrade perl-Pod-HtmlUpgrade perl-utilsUpgrade perl-libnetcfgUpgrade perl-ErrnoUpgrade perl-IO-ZlibUpgrade perl-Math-ComplexUpgrade perl-Module-LoadedUpgrade perl-libs-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-MemoizeUpgrade perl-TestUpgrade perl-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-debugsourceUpgrade perl-Attribute-HandlersUpgrade perl-IO-debuginfoUpgrade perl-develUpgrade perlUpgrade perl-coreUpgrade perl-Devel-Peek-debuginfoUpgrade perl-libsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perl-SelfLoaderUpgrade perl-CPANUpgrade perl-Time-Piece-debuginfoUpgrade perl-ExtUtils-CBuilderUpgrade perl-IOUpgrade perl-ExtUtils-InstallUpgrade perl-Devel-PeekUpgrade perl-Time-PieceUpgrade perl-interpreterUpgrade perl-testsUpgrade perl-Net-PingUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-MiniperlUpgrade perl-macrosUpgrade perl-Package-Constants | Feb 4, 2021 | Jun 5, 2020 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jun 5, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Jun 15, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-coreUpgrade perl-macrosUpgrade perlUpgrade perl-develUpgrade perl-libs | Nov 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-libsUpgrade perl-develUpgrade perlUpgrade perl-coreUpgrade perl-macros | Sep 28, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-libsUpgrade perl-coreUpgrade perlUpgrade perl-macrosUpgrade perl-devel | Sep 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perlUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-utilsUpgrade perl-libsUpgrade perl-develUpgrade perl-interpreter | Jul 31, 2020 | Jun 5, 2020 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory5 | Dec 10, 2020 | Jun 5, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade perl-testsUpgrade perl-develUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-MiniperlUpgrade perl-IO-Compress-ZlibUpgrade perl-Module-LoadUpgrade perl-TestUpgrade perl-Package-ConstantsUpgrade perl-Module-CoreListUpgrade perl-Module-BuildUpgrade perl-libnetcfgUpgrade perl-Test-HarnessUpgrade perl-versionUpgrade perl-IPC-CmdUpgrade perl-Compress-Raw-ZlibUpgrade perl-CGIUpgrade perl-Math-ComplexUpgrade perl-suidperlUpgrade perl-parentUpgrade perl-IO-ZlibUpgrade perl-Params-CheckUpgrade perl-Time-HiResUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-MakeMakerUpgrade perl-IO-Compress-Bzip2Upgrade perl-File-FetchUpgrade perl-utilsUpgrade perl-Compress-Raw-Bzip2Upgrade perl-libsUpgrade perl-MemoizeUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-PluggableUpgrade perl-Test-SimpleUpgrade perl-IO-Compress-BaseUpgrade perl-coreUpgrade perl-interpreterUpgrade perl-ErrnoUpgrade perl-Devel-PeekUpgrade perl-Module-LoadedUpgrade perl-Pod-EscapesUpgrade perl-Attribute-HandlersUpgrade perl-Devel-SelfStubberUpgrade perl-Archive-TarUpgrade perl-Net-PingUpgrade perl-Term-UIUpgrade perl-ExtUtils-CBuilderUpgrade perl-macrosUpgrade perl-ExtUtils-ParseXSUpgrade perl-CPANUpgrade perl-Compress-ZlibUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-SimpleUpgrade perl-Log-MessageUpgrade perl-Archive-ExtractUpgrade perlUpgrade perl-SelfLoaderUpgrade perl-Pod-HtmlUpgrade perl-CPANPLUSUpgrade perl-IOUpgrade perl-Digest-SHAUpgrade perl-Parse-CPAN-MetaUpgrade perl-Module-Load-ConditionalUpgrade perl-openUpgrade perl-Object-AccessorUpgrade perl-Time-Piece | Feb 4, 2021 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade perl-ExtUtils-MiniperlUpgrade perl-IO-debuginfoUpgrade perl-libnetcfgUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Math-ComplexUpgrade perl-Module-CoreListUpgrade perl-libsUpgrade perl-CPANUpgrade perl-IOUpgrade perl-debugsourceUpgrade perl-TestUpgrade perl-Object-AccessorUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-EmbedUpgrade perl-testsUpgrade perl-develUpgrade perl-Package-ConstantsUpgrade perl-utilsUpgrade perl-Attribute-HandlersUpgrade perl-Net-PingUpgrade perl-Devel-PeekUpgrade perl-Pod-HtmlUpgrade perl-macrosUpgrade perl-coreUpgrade perl-interpreter-debuginfoUpgrade perl-SelfLoaderUpgrade perl-Time-Piece-debuginfoUpgrade perl-interpreterUpgrade perl-debuginfoUpgrade perl-openUpgrade perl-libs-debuginfoUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-MemoizeNo solution existsUpgrade perl-Module-LoadedUpgrade perlUpgrade perl-Devel-SelfStubberUpgrade perl-Time-PieceUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Errno | Feb 4, 2021 | Jun 5, 2020 |
| Rocky_linux | — | Upgrade perl-libsUpgrade perl-Devel-Peek-debuginfoUpgrade perl-develUpgrade perl-debugsourceUpgrade perl-testsUpgrade perl-IO-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-macrosUpgrade perl-Time-Piece-debuginfoUpgrade perl-interpreterUpgrade perl-Time-PieceUpgrade perl-IOUpgrade perl-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-Devel-PeekUpgrade perl-ErrnoUpgrade perl | Mar 12, 2024 | Jun 5, 2020 |
| Suse | — | Upgrade perl-docUpgrade perl-base-32bitUpgrade perlUpgrade perl-baseUpgrade perl-core-DB_FileUpgrade perl-32bit | Jun 19, 2020 | Jun 5, 2020 |
| Ubuntu | — | Upgrade perl (Ubuntu Pro)Upgrade perl | Oct 27, 2020 | Jun 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub