A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.38Upgrade perl5-develUpgrade perl5.40Upgrade perl5.36 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-Tie-FileUpgrade perl-DynaLoaderUpgrade perl-Term-ReadLineUpgrade perl-I18N-LangTagsUpgrade perl-Math-ComplexUpgrade perl-Locale-Maketext-SimpleUpgrade perl-encoding-warningsUpgrade perl-docUpgrade perl-AutoSplitUpgrade perl-phUpgrade perl-subsUpgrade perl-libUpgrade perl-I18N-LanginfoUpgrade perl-Hash-UtilUpgrade perl-FileCacheUpgrade perl-TestUpgrade perl-overloadingUpgrade perl-localeUpgrade perl-File-DosGlobUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-GDBM_FileUpgrade perl-MemoizeUpgrade perl-Pod-HtmlUpgrade perl-sortUpgrade perl-EnglishUpgrade perl-ErrnoUpgrade perl-Devel-SelfStubberUpgrade perl-develUpgrade perl-utilsUpgrade perl-Unicode-UCDUpgrade perl-Pod-FunctionsUpgrade perl-Sys-HostnameUpgrade perl-POSIXUpgrade perl-libsUpgrade perl-ODBM_FileUpgrade perl-FileHandleUpgrade perl-fieldsUpgrade perl-filetestUpgrade perl-ExtUtils-ConstantUpgrade perl-SelectSaverUpgrade perl-NEXTUpgrade perl-sigtrapUpgrade perl-mroUpgrade perl-ExtUtils-MiniperlUpgrade perl-debuggerUpgrade perl-User-pwentUpgrade perlUpgrade perl-NDBM_FileUpgrade perl-ifUpgrade perl-AutoLoaderUpgrade perl-Devel-PeekUpgrade perl-blibUpgrade perl-File-CopyUpgrade perl-ThreadUpgrade perl-libnetcfgUpgrade perl-diagnosticsUpgrade perl-DumpvalueUpgrade perl-ExtUtils-EmbedUpgrade perl-Text-AbbrevUpgrade perl-DirHandleUpgrade perl-BenchmarkUpgrade perl-BUpgrade perl-File-CompareUpgrade perl-Search-DictUpgrade perl-Term-CompleteUpgrade perl-Thread-SemaphoreUpgrade perl-overloadUpgrade perl-baseUpgrade perl-Time-PieceUpgrade perl-IOUpgrade perl-OpcodeUpgrade perl-Class-StructUpgrade perl-Module-LoadedUpgrade perl-FindBinUpgrade perl-varsUpgrade perl-Attribute-HandlersUpgrade perl-FcntlUpgrade perl-macrosUpgrade perl-SymbolUpgrade perl-DBM_FilterUpgrade perl-File-BasenameUpgrade perl-openUpgrade perl-TimeUpgrade perl-lessUpgrade perl-interpreterUpgrade perl-Getopt-StdUpgrade perl-vmsishUpgrade perl-I18N-CollateUpgrade perl-TieUpgrade perl-Tie-MemoizeUpgrade perl-File-FindUpgrade perl-File-statUpgrade perl-SafeUpgrade perl-SelfLoaderUpgrade perl-IPC-Open3Upgrade perl-meta-notationUpgrade perl-Hash-Util-FieldHashUpgrade perl-autouseUpgrade perl-Net | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-ErrnoUpgrade perl-libUpgrade perl-Search-DictUpgrade perl-subsUpgrade perl-POSIXUpgrade perl-varsUpgrade perl-OpcodeUpgrade perl-I18N-LanginfoUpgrade perl-SelfLoaderUpgrade perl-libsUpgrade perl-Hash-UtilUpgrade perl-Pod-FunctionsUpgrade perl-Opcode-debuginfoUpgrade perl-NEXTUpgrade perl-I18N-CollateUpgrade perl-Class-StructUpgrade perl-SelectSaverUpgrade perl-Attribute-HandlersUpgrade perl-POSIX-debuginfoUpgrade perl-debugsourceUpgrade perl-blibUpgrade perl-sigtrapUpgrade perl-File-CopyUpgrade perl-FindBinUpgrade perl-Config-ExtensionsUpgrade perl-encoding-warningsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-debuggerUpgrade perl-NDBM_FileUpgrade perl-ODBM_File-debuginfoUpgrade perl-overloadingUpgrade perl-Devel-SelfStubberUpgrade perl-Text-AbbrevUpgrade perl-AutoSplitUpgrade perl-B-debuginfoUpgrade perl-DBM_FilterUpgrade perl-GDBM_FileUpgrade perl-develUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Devel-PeekUpgrade perl-Thread-SemaphoreUpgrade perl-utilsUpgrade perl-File-FindUpgrade perl-Fcntl-debuginfoUpgrade perl-FileCacheUpgrade perl-docUpgrade perl-ExtUtils-MiniperlUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-phNo solution existsUpgrade perl-DynaLoaderUpgrade perl-AutoLoaderUpgrade perl-Math-ComplexUpgrade perl-File-DosGlobUpgrade perl-TestUpgrade perl-DumpvalueUpgrade perl-deprecateUpgrade perl-debuginfoUpgrade perl-DirHandleUpgrade perl-Pod-HtmlUpgrade perl-File-BasenameUpgrade perl-ExtUtils-ConstantUpgrade perl-Hash-Util-FieldHashUpgrade perl-macrosUpgrade perl-Getopt-StdUpgrade perl-FileHandleUpgrade perl-mro-debuginfoUpgrade perl-SafeUpgrade perl-sortUpgrade perl-GDBM_File-debuginfoUpgrade perl-File-CompareUpgrade perl-autouseUpgrade perl-IOUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Sys-HostnameUpgrade perl-libnetcfgUpgrade perl-interpreterUpgrade perl-BUpgrade perl-MemoizeUpgrade perl-Tie-FileUpgrade perl-localeUpgrade perl-IO-debuginfoUpgrade perl-BenchmarkUpgrade perl-File-statUpgrade perl-diagnosticsUpgrade perl-lessUpgrade perl-overloadUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-libs-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-baseUpgrade perl-SymbolUpgrade perl-Term-ReadLineUpgrade perl-NetUpgrade perl-mroUpgrade perl-IPC-Open3Upgrade perl-interpreter-debuginfoUpgrade perl-ifUpgrade perl-vmsishUpgrade perl-filetestUpgrade perl-ThreadUpgrade perl-FcntlUpgrade perl-EnglishUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Time-PieceUpgrade perl-TieUpgrade perl-ODBM_FileUpgrade perl-Term-CompleteUpgrade perl-TimeUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Module-LoadedUpgrade perl-Unicode-UCDUpgrade perl-openUpgrade perl-User-pwentUpgrade perlUpgrade perl-fieldsUpgrade perl-Tie-MemoizeUpgrade perl-meta-notation | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-interpreterUpgrade perl-GDBM_File-debuginfoUpgrade perl-IOUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-ODBM_FileUpgrade perl-Sys-HostnameUpgrade perl-mroUpgrade perl-Time-Piece-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-BUpgrade perl-Time-PieceUpgrade perl-ErrnoUpgrade perl-debuginfoUpgrade perlUpgrade perl-interpreter-debuginfoUpgrade perl-IO-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-FcntlUpgrade perl-Hash-UtilUpgrade perl-B-debuginfoUpgrade perl-File-DosGlobUpgrade perl-OpcodeUpgrade perl-POSIXUpgrade perl-DynaLoaderUpgrade perl-NDBM_FileUpgrade perl-File-DosGlob-debuginfoUpgrade perl-phUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Devel-PeekUpgrade perl-mro-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-libUpgrade perl-NDBM_File-debuginfoUpgrade perl-debugsourceUpgrade perl-ODBM_File-debuginfoUpgrade perl-libsUpgrade perl-GDBM_FileUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-POSIX-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-develUpgrade perl-Hash-Util-FieldHash | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub