Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-testsUpgrade perlUpgrade perl-interpreterUpgrade perl-utilsUpgrade perl-libsUpgrade perl-openUpgrade perl-develUpgrade perl-libnetcfgUpgrade perl-macros | May 4, 2022 | Jun 5, 2020 |
| Alpine Linux | — | Upgrade perl | Jun 19, 2020 | Jun 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perl-debuginfoUpgrade perl-macrosUpgrade perl-Pod-EscapesUpgrade perl-ExtUtils-CBuilderUpgrade perl-Module-LoadedUpgrade perl-CPANUpgrade perlUpgrade perl-Time-PieceUpgrade perl-ExtUtils-EmbedUpgrade perl-ExtUtils-InstallUpgrade perl-coreUpgrade perl-Module-CoreListUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-develUpgrade perl-Package-ConstantsUpgrade perl-Object-AccessorUpgrade perl-libsUpgrade perl-Locale-Maketext-Simple | Feb 22, 2021 | Jun 5, 2020 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Mar 17, 2021 | Jun 5, 2020 |
| Centos_linux | — | Upgrade perl-libs-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-TestUpgrade perl-utilsUpgrade perl-Pod-HtmlUpgrade perl-interpreter-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-libnetcfgUpgrade perl-Object-AccessorUpgrade perl-debuginfoUpgrade perl-debugsourceUpgrade perl-openUpgrade perl-IO-debuginfoUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-MemoizeUpgrade perl-coreUpgrade perl-Attribute-HandlersUpgrade perl-Math-ComplexUpgrade perl-ErrnoUpgrade perl-IO-ZlibUpgrade perl-Module-LoadedUpgrade perl-libsUpgrade perl-develUpgrade perl-ExtUtils-MiniperlUpgrade perl-testsUpgrade perl-Time-Piece-debuginfoUpgrade perl-interpreterUpgrade perl-Net-PingUpgrade perl-ExtUtils-InstallUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-CBuilderUpgrade perl-SelfLoaderUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-CPANUpgrade perl-Pod-EscapesUpgrade perl-IOUpgrade perl-Devel-PeekUpgrade perl-macrosUpgrade perl-Package-Constants | Feb 4, 2021 | Jun 5, 2020 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jun 5, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Jun 15, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-libsUpgrade perlUpgrade perl-develUpgrade perl-macrosUpgrade perl-core | Nov 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perl-libsUpgrade perlUpgrade perl-coreUpgrade perl-develUpgrade perl-macros | Sep 28, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-develUpgrade perl-macrosUpgrade perlUpgrade perl-libsUpgrade perl-core | Sep 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perl-interpreterUpgrade perl-develUpgrade perl-libsUpgrade perl-macrosUpgrade perl-utilsUpgrade perl-libnetcfgUpgrade perl | Jul 31, 2020 | Jun 5, 2020 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory5 | Dec 10, 2020 | Jun 5, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade perl-Devel-PeekUpgrade perlUpgrade perl-openUpgrade perl-ErrnoUpgrade perl-Module-LoadedUpgrade perl-Attribute-HandlersUpgrade perl-interpreterUpgrade perl-Archive-TarUpgrade perl-IO-Compress-BaseUpgrade perl-coreUpgrade perl-IOUpgrade perl-Module-Load-ConditionalUpgrade perl-ExtUtils-ParseXSUpgrade perl-Devel-SelfStubberUpgrade perl-Time-PieceUpgrade perl-Log-MessageUpgrade perl-Pod-EscapesUpgrade perl-Term-UIUpgrade perl-CPANPLUSUpgrade perl-Digest-SHAUpgrade perl-Pod-SimpleUpgrade perl-Archive-ExtractUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-HtmlUpgrade perl-Parse-CPAN-MetaUpgrade perl-SelfLoaderUpgrade perl-Net-PingUpgrade perl-macrosUpgrade perl-Compress-ZlibUpgrade perl-CPANUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-CBuilderUpgrade perl-testsUpgrade perl-Module-PluggableUpgrade perl-versionUpgrade perl-libnetcfgUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Math-ComplexUpgrade perl-Module-LoadUpgrade perl-parentUpgrade perl-Time-HiResUpgrade perl-Module-CoreListUpgrade perl-Compress-Raw-ZlibUpgrade perl-MemoizeUpgrade perl-File-FetchUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-ExtUtils-InstallUpgrade perl-Compress-Raw-Bzip2Upgrade perl-Test-SimpleUpgrade perl-suidperlUpgrade perl-TestUpgrade perl-Package-ConstantsUpgrade perl-IO-Compress-Bzip2Upgrade perl-IPC-CmdUpgrade perl-CGIUpgrade perl-Test-HarnessUpgrade perl-Module-BuildUpgrade perl-Params-CheckUpgrade perl-ExtUtils-MiniperlUpgrade perl-ExtUtils-EmbedUpgrade perl-develUpgrade perl-IO-Compress-ZlibUpgrade perl-utils | Feb 4, 2021 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade perl-IO-debuginfoUpgrade perl-debugsourceUpgrade perl-CPANUpgrade perl-libsUpgrade perl-testsUpgrade perl-Module-CoreListUpgrade perl-develUpgrade perl-ExtUtils-InstallUpgrade perl-IOUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Package-ConstantsUpgrade perl-libnetcfgUpgrade perl-Object-AccessorUpgrade perl-TestUpgrade perl-Math-ComplexUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-MiniperlUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-Piece-debuginfoUpgrade perlUpgrade perl-utilsUpgrade perl-Attribute-HandlersUpgrade perl-macrosUpgrade perl-coreUpgrade perl-interpreterUpgrade perl-openUpgrade perl-Pod-EscapesUpgrade perl-SelfLoaderUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Net-PingUpgrade perl-ErrnoUpgrade perl-Devel-PeekUpgrade perl-debuginfoUpgrade perl-Pod-HtmlUpgrade perl-Time-PieceUpgrade perl-libs-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-interpreter-debuginfoUpgrade perl-Module-LoadedNo solution existsUpgrade perl-ExtUtils-CBuilderUpgrade perl-Memoize | Feb 4, 2021 | Jun 5, 2020 |
| Rocky_linux | — | Upgrade perl-Devel-PeekUpgrade perl-interpreter-debuginfoUpgrade perl-ErrnoUpgrade perl-debuginfoUpgrade perl-Time-PieceUpgrade perlUpgrade perl-libs-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-interpreterUpgrade perl-IOUpgrade perl-macrosUpgrade perl-IO-debuginfoUpgrade perl-develUpgrade perl-debugsourceUpgrade perl-libsUpgrade perl-Devel-Peek-debuginfoUpgrade perl-tests | Mar 12, 2024 | Jun 5, 2020 |
| Suse | — | Upgrade perl-baseUpgrade perl-core-DB_FileUpgrade perl-32bitUpgrade perlUpgrade perl-docUpgrade perl-base-32bit | Jun 19, 2020 | Jun 5, 2020 |
| Ubuntu | — | Upgrade perlUpgrade perl (Ubuntu Pro) | Oct 27, 2020 | Jun 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub