Name: CVE-2020-12723: Buffer Copy without Checking Size of Input
Creator: Rapid7
Published: 2020-06-05T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2020-12723, CWE-120, EPSS 0.05971

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alma_linux	—	Upgrade perl-utilsUpgrade perl-libnetcfgUpgrade perl-libsUpgrade perl-testsUpgrade perl-openUpgrade perlUpgrade perl-macrosUpgrade perl-develUpgrade perl-interpreter	May 4, 2022	Jun 5, 2020
Alpine Linux	—	Upgrade perl	Jun 19, 2020	Jun 5, 2020
Amazon Linux Ami 2	—	Upgrade perlUpgrade perl-Module-LoadedUpgrade perl-coreUpgrade perl-Time-PieceUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-EmbedUpgrade perl-debuginfoUpgrade perl-Object-AccessorUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Package-ConstantsUpgrade perl-macrosUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-InstallUpgrade perl-Pod-EscapesUpgrade perl-testsUpgrade perl-CPANUpgrade perl-IO-ZlibUpgrade perl-develUpgrade perl-libs	Feb 22, 2021	Jun 5, 2020
Apple Osx Perl	—	Upgrade macOS to the latest version	Mar 17, 2021	Jun 5, 2020
Centos_linux	—	Upgrade perl-interpreter-debuginfoUpgrade perl-debuginfoUpgrade perl-macrosUpgrade perl-openUpgrade perl-utilsUpgrade perl-Attribute-HandlersUpgrade perl-CPANUpgrade perl-Object-AccessorUpgrade perl-libnetcfgUpgrade perl-Devel-PeekUpgrade perl-ExtUtils-InstallUpgrade perl-Time-PieceUpgrade perl-Time-Piece-debuginfoUpgrade perl-Module-CoreListUpgrade perl-Pod-EscapesUpgrade perl-Net-PingUpgrade perl-coreUpgrade perl-Math-ComplexUpgrade perl-ExtUtils-EmbedUpgrade perl-Package-ConstantsUpgrade perl-ExtUtils-CBuilderUpgrade perl-SelfLoaderUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Module-LoadedUpgrade perl-libs-debuginfoUpgrade perl-IO-ZlibUpgrade perl-testsUpgrade perl-ExtUtils-MiniperlUpgrade perl-IOUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-debugsourceUpgrade perlUpgrade perl-Devel-Peek-debuginfoUpgrade perl-develUpgrade perl-TestUpgrade perl-Devel-SelfStubberUpgrade perl-IO-debuginfoUpgrade perl-libsUpgrade perl-interpreterUpgrade perl-Errno	Feb 4, 2021	Jun 5, 2020
Debian	—	Upgrade perl	Jul 30, 2024	Jun 5, 2020
Gentoo Linux	—	Upgrade dev-lang/perl.	Jun 15, 2020	Jun 5, 2020
Huawei Euleros 2_0_sp2	—	Upgrade perl-macrosUpgrade perlUpgrade perl-coreUpgrade perl-libsUpgrade perl-devel	Nov 3, 2020	Jun 5, 2020
Huawei Euleros 2_0_sp3	—	Upgrade perl-develUpgrade perl-libsUpgrade perl-coreUpgrade perlUpgrade perl-macros	Sep 28, 2020	Jun 5, 2020
Huawei Euleros 2_0_sp5	—	Upgrade perl-macrosUpgrade perl-develUpgrade perl-libsUpgrade perl-coreUpgrade perl	Sep 3, 2020	Jun 5, 2020
Huawei Euleros 2_0_sp8	—	Upgrade perl-libsUpgrade perl-develUpgrade perl-interpreterUpgrade perl-utilsUpgrade perl-macrosUpgrade perl-libnetcfgUpgrade perl	Jul 31, 2020	Jun 5, 2020
Ibm Aix	—	Apply the fix or workaround for perl_advisory5	Dec 10, 2020	Jun 5, 2020
Nutanix Ahv	—	Upgrade Nutanix AHV to the latest version	Jun 5, 2026	Aug 24, 2022
Oracle_linux	—	Upgrade perl-Time-HiResUpgrade perl-Compress-Raw-ZlibUpgrade perl-ExtUtils-EmbedUpgrade perl-Math-ComplexUpgrade perl-Time-PieceUpgrade perl-utilsUpgrade perl-Archive-ExtractUpgrade perl-Pod-EscapesUpgrade perl-Log-MessageUpgrade perl-macrosUpgrade perl-Net-PingUpgrade perl-MemoizeUpgrade perl-Digest-SHAUpgrade perl-CGIUpgrade perl-Devel-PeekUpgrade perl-Package-ConstantsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-MakeMakerUpgrade perl-suidperlUpgrade perl-Module-PluggableUpgrade perl-openUpgrade perl-Log-Message-SimpleUpgrade perl-coreUpgrade perl-Params-CheckUpgrade perl-IO-Compress-Bzip2Upgrade perl-ExtUtils-CBuilderUpgrade perl-libnetcfgUpgrade perl-parentUpgrade perl-Pod-HtmlUpgrade perl-SelfLoaderUpgrade perl-Parse-CPAN-MetaUpgrade perl-Module-CoreListUpgrade perl-interpreterUpgrade perl-File-FetchUpgrade perl-develUpgrade perl-CPANUpgrade perl-Compress-Raw-Bzip2Upgrade perl-CPANPLUSUpgrade perl-Pod-SimpleUpgrade perl-Devel-SelfStubberUpgrade perl-Module-LoadUpgrade perl-IO-Compress-BaseUpgrade perl-Module-Load-ConditionalUpgrade perl-ErrnoUpgrade perl-IPC-CmdUpgrade perl-IO-ZlibUpgrade perl-ExtUtils-ParseXSUpgrade perl-ExtUtils-InstallUpgrade perl-Attribute-HandlersUpgrade perl-testsUpgrade perl-Test-SimpleUpgrade perl-Module-LoadedUpgrade perl-IO-Compress-ZlibUpgrade perl-ExtUtils-MiniperlUpgrade perlUpgrade perl-libsUpgrade perl-Compress-ZlibUpgrade perl-TestUpgrade perl-versionUpgrade perl-Module-BuildUpgrade perl-Archive-TarUpgrade perl-IOUpgrade perl-Test-HarnessUpgrade perl-Term-UI	Feb 4, 2021	Jun 2, 2020
Redhat_linux	—	Upgrade perl-SelfLoaderUpgrade perl-testsUpgrade perl-interpreterUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-openUpgrade perl-libs-debuginfoUpgrade perl-ErrnoUpgrade perl-CPANUpgrade perl-ExtUtils-InstallUpgrade perl-TestNo solution existsUpgrade perl-ExtUtils-MiniperlUpgrade perl-Module-CoreListUpgrade perl-ExtUtils-CBuilderUpgrade perl-IOUpgrade perl-Pod-EscapesUpgrade perl-Package-ConstantsUpgrade perl-IO-debuginfoUpgrade perl-libsUpgrade perl-Time-PieceUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-SelfStubberUpgrade perl-macrosUpgrade perl-Attribute-HandlersUpgrade perl-Devel-PeekUpgrade perl-coreUpgrade perlUpgrade perl-Locale-Maketext-SimpleUpgrade perl-interpreter-debuginfoUpgrade perl-Pod-HtmlUpgrade perl-Object-AccessorUpgrade perl-ExtUtils-EmbedUpgrade perl-MemoizeUpgrade perl-debugsourceUpgrade perl-Math-ComplexUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-utilsUpgrade perl-Net-PingUpgrade perl-libnetcfg	Feb 4, 2021	Jun 5, 2020
Suse	—	Upgrade perlUpgrade perl-baseUpgrade perl-docUpgrade perl-base-32bitUpgrade perl-core-DB_FileUpgrade perl-32bit	Jun 19, 2020	Jun 5, 2020
Ubuntu	—	Upgrade perl (Ubuntu Pro)Upgrade perl	Oct 27, 2020	Jun 5, 2020
Vmware Photon_os	—	Use 'tdnf update' to upgrade all packages to the latest version.	Jan 20, 2025	Jun 5, 2020

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

Covered by Rapid7

Prioritise with Active Threat Intelligence