The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5-develUpgrade perl5.38Upgrade perl5.40Upgrade perl5.36 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perl-libsUpgrade perl | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perlUpgrade perl-libs | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perl-libsUpgrade perl | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-meta-notationUpgrade perl-File-FindUpgrade perl-FcntlUpgrade perl-IPC-Open3Upgrade perl-FindBinUpgrade perl-Search-DictUpgrade perl-Term-CompleteUpgrade perl-BUpgrade perl-overloadUpgrade perl-File-CompareUpgrade perl-I18N-CollateUpgrade perl-Getopt-StdUpgrade perl-DirHandleUpgrade perl-vmsishUpgrade perl-BenchmarkUpgrade perl-interpreterUpgrade perl-SafeUpgrade perl-File-statUpgrade perl-baseUpgrade perl-Thread-SemaphoreUpgrade perl-varsUpgrade perl-Module-LoadedUpgrade perl-Attribute-HandlersUpgrade perl-Class-StructUpgrade perl-IOUpgrade perl-Time-PieceUpgrade perl-Tie-MemoizeUpgrade perl-Hash-Util-FieldHashUpgrade perl-NetUpgrade perl-Text-AbbrevUpgrade perl-ifUpgrade perl-blibUpgrade perl-diagnosticsUpgrade perl-lessUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-DumpvalueUpgrade perl-ExtUtils-EmbedUpgrade perl-SelfLoaderUpgrade perl-autouseUpgrade perl-OpcodeUpgrade perl-TieUpgrade perl-File-CopyUpgrade perl-DBM_FilterUpgrade perl-openUpgrade perl-ThreadUpgrade perl-File-BasenameUpgrade perl-TimeUpgrade perl-Devel-PeekUpgrade perl-AutoLoaderUpgrade perl-SymbolUpgrade perl-filetestUpgrade perl-DynaLoaderUpgrade perlUpgrade perl-Devel-SelfStubberUpgrade perl-Hash-UtilUpgrade perl-overloadingUpgrade perl-libUpgrade perl-SelectSaverUpgrade perl-debuggerUpgrade perl-Sys-HostnameUpgrade perl-POSIXUpgrade perl-libsUpgrade perl-ErrnoUpgrade perl-NDBM_FileUpgrade perl-localeUpgrade perl-docUpgrade perl-Math-ComplexUpgrade perl-Term-ReadLineUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-LangTagsUpgrade perl-EnglishUpgrade perl-encoding-warningsUpgrade perl-FileCacheUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-GDBM_FileUpgrade perl-File-DosGlobUpgrade perl-sortUpgrade perl-subsUpgrade perl-phUpgrade perl-AutoSplitUpgrade perl-TestUpgrade perl-I18N-LanginfoUpgrade perl-utilsUpgrade perl-Unicode-UCDUpgrade perl-Tie-FileUpgrade perl-Pod-FunctionsUpgrade perl-ODBM_FileUpgrade perl-NEXTUpgrade perl-FileHandleUpgrade perl-fieldsUpgrade perl-ExtUtils-ConstantUpgrade perl-develUpgrade perl-User-pwentUpgrade perl-sigtrapUpgrade perl-mroUpgrade perl-ExtUtils-Miniperl | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-BenchmarkUpgrade perl-IOUpgrade perl-MemoizeUpgrade perl-File-CompareUpgrade perl-localeUpgrade perl-BUpgrade perl-File-statUpgrade perl-GDBM_File-debuginfoUpgrade perl-ifUpgrade perl-diagnosticsUpgrade perl-Term-ReadLineUpgrade perl-IO-debuginfoUpgrade perl-autouseUpgrade perl-Locale-Maketext-SimpleUpgrade perl-interpreterUpgrade perl-I18N-LangTagsUpgrade perl-debuginfoUpgrade perl-lessUpgrade perl-overloadUpgrade perl-Sys-HostnameUpgrade perl-Time-PieceUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-mroUpgrade perl-interpreter-debuginfoUpgrade perl-baseUpgrade perl-filetestUpgrade perl-IPC-Open3Upgrade perl-ThreadUpgrade perl-Unicode-UCDUpgrade perl-Module-LoadedUpgrade perl-User-pwentUpgrade perl-Devel-Peek-debuginfoUpgrade perl-FcntlUpgrade perl-Hash-Util-FieldHashUpgrade perl-NetUpgrade perl-TimeUpgrade perl-ODBM_FileUpgrade perl-EnglishUpgrade perl-Term-CompleteUpgrade perl-libs-debuginfoUpgrade perl-SymbolUpgrade perl-TieUpgrade perl-mro-debuginfoUpgrade perl-ExtUtils-EmbedUpgrade perl-fieldsUpgrade perl-openUpgrade perl-ExtUtils-ConstantUpgrade perl-File-BasenameUpgrade perl-vmsishUpgrade perlUpgrade perl-FileHandleUpgrade perl-macrosUpgrade perl-Tie-MemoizeUpgrade perl-sortUpgrade perl-libnetcfgUpgrade perl-SafeUpgrade perl-Getopt-StdUpgrade perl-Pod-HtmlUpgrade perl-Tie-FileUpgrade perl-DirHandleUpgrade perl-meta-notationUpgrade perl-B-debuginfoUpgrade perl-DBM_FilterUpgrade perl-libsUpgrade perl-OpcodeUpgrade perl-Text-AbbrevUpgrade perl-Devel-SelfStubberUpgrade perl-NDBM_FileUpgrade perl-varsUpgrade perl-develUpgrade perl-POSIXUpgrade perl-File-DosGlobUpgrade perl-Config-ExtensionsUpgrade perl-AutoSplitUpgrade perl-utilsUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Thread-SemaphoreUpgrade perl-DumpvalueUpgrade perl-POSIX-debuginfoUpgrade perl-SelectSaverUpgrade perl-I18N-CollateUpgrade perl-File-CopyUpgrade perl-Class-StructUpgrade perl-FindBinUpgrade perl-Math-ComplexUpgrade perl-Hash-UtilUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-DynaLoaderUpgrade perl-Devel-PeekUpgrade perl-NEXTUpgrade perl-SelfLoaderUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-phUpgrade perl-Opcode-debuginfoUpgrade perl-TestUpgrade perl-docNo solution existsUpgrade perl-Pod-FunctionsUpgrade perl-FileCacheUpgrade perl-NDBM_File-debuginfoUpgrade perl-Attribute-HandlersUpgrade perl-ExtUtils-MiniperlUpgrade perl-overloadingUpgrade perl-GDBM_FileUpgrade perl-AutoLoaderUpgrade perl-I18N-LanginfoUpgrade perl-debugsourceUpgrade perl-encoding-warningsUpgrade perl-blibUpgrade perl-libUpgrade perl-Search-DictUpgrade perl-sigtrapUpgrade perl-subsUpgrade perl-File-FindUpgrade perl-ErrnoUpgrade perl-debuggerUpgrade perl-deprecateUpgrade perl-ODBM_File-debuginfo | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-POSIXUpgrade perl-GDBM_FileUpgrade perl-File-DosGlobUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-OpcodeUpgrade perl-I18N-LanginfoUpgrade perl-POSIX-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-libsUpgrade perl-DynaLoaderUpgrade perl-debugsourceUpgrade perl-NDBM_FileUpgrade perl-phUpgrade perl-libUpgrade perl-Hash-UtilUpgrade perl-GDBM_File-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-ErrnoUpgrade perl-IOUpgrade perl-ODBM_FileUpgrade perl-Sys-HostnameUpgrade perl-BUpgrade perl-Fcntl-debuginfoUpgrade perl-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-interpreterUpgrade perlUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-Time-PieceUpgrade perl-IO-debuginfoUpgrade perl-FcntlUpgrade perl-Time-Piece-debuginfoUpgrade perl-mroUpgrade perl-B-debuginfoUpgrade perl-develUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Hash-Util-FieldHash | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub