Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade perl-interpreterUpgrade perl-libsUpgrade perl-utilsUpgrade perl-testsUpgrade perlUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-develUpgrade perl-open | May 4, 2022 | Jun 5, 2020 |
| Alpine Linux | — | Upgrade perl | Jun 19, 2020 | Jun 5, 2020 |
| Amazon Linux Ami 2 | — | Upgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-libsUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Package-ConstantsUpgrade perl-testsUpgrade perl-coreUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-CBuilderUpgrade perlUpgrade perl-Pod-EscapesUpgrade perl-Time-PieceUpgrade perl-ExtUtils-InstallUpgrade perl-Module-LoadedUpgrade perl-macrosUpgrade perl-CPANUpgrade perl-debuginfoUpgrade perl-ExtUtils-Embed | Feb 22, 2021 | Jun 5, 2020 |
| Apple Osx Perl | — | Upgrade macOS to the latest version | Mar 17, 2021 | Jun 5, 2020 |
| Centos_linux | — | Upgrade perl-testsUpgrade perl-IOUpgrade perl-ExtUtils-MiniperlUpgrade perl-Time-Piece-debuginfoUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-InstallUpgrade perl-ExtUtils-EmbedUpgrade perl-SelfLoaderUpgrade perl-Devel-PeekUpgrade perl-interpreterUpgrade perl-Time-PieceUpgrade perl-macrosUpgrade perl-Module-CoreListUpgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Net-PingUpgrade perl-libnetcfgUpgrade perl-utilsUpgrade perl-Object-AccessorUpgrade perl-MemoizeUpgrade perl-IO-debuginfoUpgrade perl-Pod-HtmlUpgrade perl-Math-ComplexUpgrade perl-libs-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-IO-ZlibUpgrade perl-Module-LoadedUpgrade perl-ErrnoUpgrade perl-debugsourceUpgrade perl-interpreter-debuginfoUpgrade perl-develUpgrade perl-libsUpgrade perl-TestUpgrade perl-openUpgrade perlUpgrade perl-Attribute-HandlersUpgrade perl-coreUpgrade perl-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Locale-Maketext-Simple | Feb 4, 2021 | Jun 5, 2020 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Jun 5, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Feb 3, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/perl. | Jun 15, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perl-develUpgrade perl-libsUpgrade perlUpgrade perl-macrosUpgrade perl-core | Nov 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade perlUpgrade perl-macrosUpgrade perl-develUpgrade perl-coreUpgrade perl-libs | Sep 28, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade perl-libsUpgrade perl-coreUpgrade perl-develUpgrade perl-macrosUpgrade perl | Sep 3, 2020 | Jun 5, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade perl-libsUpgrade perl-interpreterUpgrade perl-develUpgrade perl-utilsUpgrade perl-macrosUpgrade perlUpgrade perl-libnetcfg | Jul 31, 2020 | Jun 5, 2020 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory5 | Dec 10, 2020 | Jun 5, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade perlUpgrade perl-IO-Compress-BaseUpgrade perl-Pod-HtmlUpgrade perl-ErrnoUpgrade perl-interpreterUpgrade perl-Digest-SHAUpgrade perl-Term-UIUpgrade perl-IOUpgrade perl-Net-PingUpgrade perl-openUpgrade perl-Archive-ExtractUpgrade perl-Time-PieceUpgrade perl-coreUpgrade perl-CPANPLUSUpgrade perl-Parse-CPAN-MetaUpgrade perl-SelfLoaderUpgrade perl-Pod-SimpleUpgrade perl-Devel-PeekUpgrade perl-Module-Load-ConditionalUpgrade perl-Attribute-HandlersUpgrade perl-Archive-TarUpgrade perl-ExtUtils-ParseXSUpgrade perl-Log-MessageUpgrade perl-Devel-SelfStubberUpgrade perl-Module-LoadedUpgrade perl-Log-Message-SimpleUpgrade perl-Pod-EscapesUpgrade perl-Object-AccessorUpgrade perl-CPANUpgrade perl-ExtUtils-CBuilderUpgrade perl-Compress-ZlibUpgrade perl-macrosUpgrade perl-Module-CoreListUpgrade perl-Compress-Raw-ZlibUpgrade perl-Time-HiResUpgrade perl-Locale-Maketext-SimpleUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Package-ConstantsUpgrade perl-Module-BuildUpgrade perl-IPC-CmdUpgrade perl-IO-Compress-Bzip2Upgrade perl-Params-CheckUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-InstallUpgrade perl-Compress-Raw-Bzip2Upgrade perl-libsUpgrade perl-parentUpgrade perl-Module-LoadUpgrade perl-Math-ComplexUpgrade perl-libnetcfgUpgrade perl-ExtUtils-MiniperlUpgrade perl-ExtUtils-EmbedUpgrade perl-develUpgrade perl-CGIUpgrade perl-versionUpgrade perl-Test-HarnessUpgrade perl-Test-SimpleUpgrade perl-Module-PluggableUpgrade perl-File-FetchUpgrade perl-testsUpgrade perl-MemoizeUpgrade perl-IO-Compress-ZlibUpgrade perl-utilsUpgrade perl-suidperlUpgrade perl-Test | Feb 4, 2021 | Jun 2, 2020 |
| Redhat_linux | — | Upgrade perl-develUpgrade perl-coreUpgrade perl-Locale-Maketext-SimpleNo solution existsUpgrade perlUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-ExtUtils-CBuilderUpgrade perl-openUpgrade perl-MemoizeUpgrade perl-Devel-SelfStubberUpgrade perl-interpreterUpgrade perl-Time-Piece-debuginfoUpgrade perl-macrosUpgrade perl-utilsUpgrade perl-Attribute-HandlersUpgrade perl-Net-PingUpgrade perl-ErrnoUpgrade perl-Pod-EscapesUpgrade perl-Pod-HtmlUpgrade perl-interpreter-debuginfoUpgrade perl-Time-PieceUpgrade perl-libs-debuginfoUpgrade perl-Devel-PeekUpgrade perl-SelfLoaderUpgrade perl-ExtUtils-MiniperlUpgrade perl-debugsourceUpgrade perl-IO-ZlibUpgrade perl-CPANUpgrade perl-Package-ConstantsUpgrade perl-IO-debuginfoUpgrade perl-libsUpgrade perl-Math-ComplexUpgrade perl-Module-CoreListUpgrade perl-Object-AccessorUpgrade perl-testsUpgrade perl-ExtUtils-Embed | Feb 4, 2021 | Jun 5, 2020 |
| Rocky_linux | — | Upgrade perl-IOUpgrade perlUpgrade perl-macrosUpgrade perl-Time-PieceUpgrade perl-ErrnoUpgrade perl-debuginfoUpgrade perl-interpreterUpgrade perl-libs-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-PeekUpgrade perl-interpreter-debuginfoUpgrade perl-debugsourceUpgrade perl-develUpgrade perl-testsUpgrade perl-Devel-Peek-debuginfoUpgrade perl-IO-debuginfoUpgrade perl-libs | Mar 12, 2024 | Jun 5, 2020 |
| Suse | — | Upgrade perl-base-32bitUpgrade perlUpgrade perl-docUpgrade perl-32bitUpgrade perl-core-DB_FileUpgrade perl-base | Jun 19, 2020 | Jun 5, 2020 |
| Ubuntu | — | Upgrade perl (Ubuntu Pro)Upgrade perl | Oct 27, 2020 | Jun 5, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jun 5, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub