Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-interpreterUpgrade perl-utilsUpgrade perl-testsUpgrade perl-libsUpgrade perlUpgrade perl-develUpgrade perl-libnetcfgUpgrade perl-openUpgrade perl-macros | May 4, 2022 | Jun 5, 2020 |
| Alpine Linux | — | Upgrade perl | Jun 19, 2020 | Jun 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perl-Object-AccessorUpgrade perl-libsUpgrade perl-Module-CoreListUpgrade perl-Package-ConstantsUpgrade perl-develUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-coreUpgrade perl-Time-PieceUpgrade perlUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-InstallUpgrade perl-Module-LoadedUpgrade perl-macrosUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-CPAN | Feb 22, 2021 | Jun 5, 2020 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Mar 17, 2021 | Jun 5, 2020 |
| Centos_linux | — | Upgrade perl-Net-PingUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-InstallUpgrade perl-IOUpgrade perl-Devel-PeekUpgrade perl-interpreterUpgrade perl-testsUpgrade perl-Time-Piece-debuginfoUpgrade perl-macrosUpgrade perl-Package-ConstantsUpgrade perl-Time-PieceUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-ExtUtils-EmbedUpgrade perl-SelfLoaderUpgrade perl-ExtUtils-MiniperlUpgrade perl-libs-debuginfoUpgrade perl-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-Math-ComplexUpgrade perl-Devel-SelfStubberUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-ErrnoUpgrade perl-Module-LoadedUpgrade perl-Object-AccessorUpgrade perl-TestUpgrade perl-libnetcfgUpgrade perl-utilsUpgrade perl-openUpgrade perl-Devel-Peek-debuginfoUpgrade perlUpgrade perl-MemoizeUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IO-debuginfoUpgrade perl-coreUpgrade perl-Pod-HtmlUpgrade perl-libsUpgrade perl-Attribute-HandlersUpgrade perl-debugsource | Feb 4, 2021 | Jun 5, 2020 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jun 5, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Jun 15, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-macrosUpgrade perl-coreUpgrade perl-libsUpgrade perl-develUpgrade perl | Nov 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-libsUpgrade perlUpgrade perl-macrosUpgrade perl-coreUpgrade perl-devel | Sep 28, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perlUpgrade perl-develUpgrade perl-macrosUpgrade perl-libsUpgrade perl-core | Sep 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perl-macrosUpgrade perl-libnetcfgUpgrade perl-utilsUpgrade perlUpgrade perl-develUpgrade perl-interpreterUpgrade perl-libs | Jul 31, 2020 | Jun 5, 2020 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory5 | Dec 10, 2020 | Jun 5, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade perl-Module-CoreListUpgrade perl-Time-HiResUpgrade perl-Test-SimpleUpgrade perl-MemoizeUpgrade perl-Module-PluggableUpgrade perl-File-FetchUpgrade perl-ExtUtils-EmbedUpgrade perl-Compress-Raw-ZlibUpgrade perl-Package-ConstantsUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MiniperlUpgrade perl-versionUpgrade perl-Test-HarnessUpgrade perl-CGIUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-ExtUtils-InstallUpgrade perl-parentUpgrade perl-libsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-TestUpgrade perl-suidperlUpgrade perl-Module-LoadUpgrade perl-IO-Compress-ZlibUpgrade perl-develUpgrade perl-libnetcfgUpgrade perl-Math-ComplexUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Module-BuildUpgrade perl-IO-Compress-Bzip2Upgrade perl-IPC-CmdUpgrade perl-utilsUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Digest-SHAUpgrade perl-IO-Compress-BaseUpgrade perl-openUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-ParseXSUpgrade perl-Devel-SelfStubberUpgrade perl-Attribute-HandlersUpgrade perl-Archive-TarUpgrade perl-Pod-EscapesUpgrade perl-CPANPLUSUpgrade perl-IOUpgrade perl-Devel-PeekUpgrade perl-Object-AccessorUpgrade perl-macrosUpgrade perl-CPANUpgrade perl-Compress-ZlibUpgrade perl-ExtUtils-CBuilderUpgrade perl-Pod-HtmlUpgrade perl-interpreterUpgrade perl-ErrnoUpgrade perl-coreUpgrade perl-Parse-CPAN-MetaUpgrade perl-SelfLoaderUpgrade perl-Term-UIUpgrade perl-Net-PingUpgrade perl-Time-PieceUpgrade perl-Pod-SimpleUpgrade perl-Archive-ExtractUpgrade perlUpgrade perl-Log-MessageUpgrade perl-Module-Load-ConditionalUpgrade perl-Module-Loaded | Feb 4, 2021 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-debugsourceUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perl-CPANUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-MiniperlUpgrade perl-IO-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-Time-PieceUpgrade perl-macrosUpgrade perl-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-Attribute-HandlersUpgrade perl-interpreter-debuginfoUpgrade perl-ErrnoUpgrade perl-SelfLoaderUpgrade perl-Pod-HtmlUpgrade perl-openUpgrade perl-Time-Piece-debuginfoUpgrade perl-Pod-EscapesUpgrade perl-Locale-Maketext-SimpleUpgrade perl-interpreterUpgrade perl-Devel-Peek-debuginfoUpgrade perl-libnetcfgUpgrade perl-Object-AccessorUpgrade perl-Math-ComplexUpgrade perl-Package-ConstantsUpgrade perl-develUpgrade perl-libsUpgrade perl-IOUpgrade perl-Test | Feb 4, 2021 | Jun 5, 2020 |
| Rocky_linux | — | Upgrade perl-develUpgrade perl-Devel-Peek-debuginfoUpgrade perl-IO-debuginfoUpgrade perl-debugsourceUpgrade perl-testsUpgrade perl-libsUpgrade perl-ErrnoUpgrade perl-macrosUpgrade perlUpgrade perl-debuginfoUpgrade perl-IOUpgrade perl-Time-PieceUpgrade perl-Time-Piece-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-interpreterUpgrade perl-interpreter-debuginfoUpgrade perl-Devel-Peek | Mar 12, 2024 | Jun 5, 2020 |
| Suse | — | Upgrade perl-docUpgrade perlUpgrade perl-base-32bitUpgrade perl-baseUpgrade perl-32bitUpgrade perl-core-DB_File | Jun 19, 2020 | Jun 5, 2020 |
| Ubuntu | — | Upgrade perlUpgrade perl (Ubuntu Pro) | Oct 27, 2020 | Jun 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub