A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5-develUpgrade perl5.40Upgrade perl5.38 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-interpreterUpgrade perl-FcntlUpgrade perl-meta-notationUpgrade perl-Module-LoadedUpgrade perl-I18N-CollateUpgrade perl-File-CompareUpgrade perl-Search-DictUpgrade perl-Term-CompleteUpgrade perl-diagnosticsUpgrade perl-DumpvalueUpgrade perl-libnetcfgUpgrade perl-ifUpgrade perl-File-CopyUpgrade perl-autouseUpgrade perl-OpcodeUpgrade perl-ThreadUpgrade perl-SelfLoaderUpgrade perl-openUpgrade perl-TimeUpgrade perl-DBM_FilterUpgrade perl-Time-PieceUpgrade perl-Term-ReadLineUpgrade perl-ODBM_FileUpgrade perl-Sys-HostnameUpgrade perl-Math-ComplexUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-LangTagsUpgrade perl-EnglishUpgrade perl-encoding-warningsUpgrade perl-File-DosGlobUpgrade perl-sortUpgrade perl-docUpgrade perl-filetestUpgrade perl-AutoSplitUpgrade perl-User-pwentUpgrade perl-sigtrapUpgrade perl-ExtUtils-MiniperlUpgrade perl-debuggerUpgrade perl-overloadingUpgrade perl-mroUpgrade perl-localeUpgrade perl-libUpgrade perl-I18N-LanginfoUpgrade perl-Hash-UtilUpgrade perl-libsUpgrade perl-FileCacheUpgrade perl-TestUpgrade perl-POSIXUpgrade perl-phUpgrade perl-subsUpgrade perl-FileHandleUpgrade perl-fieldsUpgrade perl-NEXTUpgrade perl-Devel-SelfStubberUpgrade perl-ExtUtils-ConstantUpgrade perl-utilsUpgrade perl-Unicode-UCDUpgrade perl-Tie-FileUpgrade perl-Pod-FunctionsUpgrade perl-NDBM_FileUpgrade perl-SelectSaverUpgrade perl-ErrnoUpgrade perl-develUpgrade perlUpgrade perl-DynaLoaderUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-Pod-HtmlUpgrade perl-MemoizeUpgrade perl-GDBM_FileUpgrade perl-vmsishUpgrade perl-SafeUpgrade perl-File-FindUpgrade perl-Attribute-HandlersUpgrade perl-IPC-Open3Upgrade perl-Getopt-StdUpgrade perl-BenchmarkUpgrade perl-Hash-Util-FieldHashUpgrade perl-File-statUpgrade perl-DirHandleUpgrade perl-varsUpgrade perl-Text-AbbrevUpgrade perl-blibUpgrade perl-ExtUtils-EmbedUpgrade perl-macrosUpgrade perl-lessUpgrade perl-Devel-PeekUpgrade perl-SymbolUpgrade perl-FindBinUpgrade perl-IOUpgrade perl-AutoLoaderUpgrade perl-NetUpgrade perl-File-BasenameUpgrade perl-Tie-MemoizeUpgrade perl-overloadUpgrade perl-Thread-SemaphoreUpgrade perl-baseUpgrade perl-BUpgrade perl-TieUpgrade perl-Class-Struct | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-SelectSaverUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-POSIX-debuginfoUpgrade perl-Class-StructUpgrade perl-develUpgrade perl-I18N-CollateUpgrade perl-debugsourceUpgrade perl-encoding-warningsUpgrade perl-blibUpgrade perl-subsUpgrade perl-libsUpgrade perl-SelfLoaderUpgrade perl-FindBinUpgrade perl-ExtUtils-MiniperlUpgrade perl-DumpvalueUpgrade perl-File-DosGlobUpgrade perl-DynaLoaderUpgrade perl-I18N-LanginfoUpgrade perl-GDBM_FileUpgrade perl-Attribute-HandlersUpgrade perl-OpcodeUpgrade perl-debuggerUpgrade perl-libUpgrade perl-ErrnoUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Hash-UtilUpgrade perl-utilsUpgrade perl-NDBM_File-debuginfoUpgrade perl-Pod-FunctionsUpgrade perl-AutoSplitUpgrade perl-Fcntl-debuginfoUpgrade perl-B-debuginfoUpgrade perl-Config-ExtensionsUpgrade perl-NEXTUpgrade perl-NDBM_FileUpgrade perl-POSIXUpgrade perl-Devel-SelfStubberUpgrade perl-Text-AbbrevUpgrade perl-DBM_FilterUpgrade perl-AutoLoaderUpgrade perl-phUpgrade perl-TestUpgrade perl-ODBM_File-debuginfoUpgrade perl-sigtrapUpgrade perl-Opcode-debuginfoUpgrade perl-docUpgrade perl-Hash-Util-FieldHash-debuginfoNo solution existsUpgrade perl-FileCacheUpgrade perl-Thread-SemaphoreUpgrade perl-deprecateUpgrade perl-File-FindUpgrade perl-overloadingUpgrade perl-File-CopyUpgrade perl-varsUpgrade perl-Devel-PeekUpgrade perl-Math-ComplexUpgrade perl-Search-DictUpgrade perl-vmsishUpgrade perl-File-statUpgrade perl-diagnosticsUpgrade perl-BUpgrade perl-fieldsUpgrade perl-Pod-HtmlUpgrade perl-openUpgrade perl-meta-notationUpgrade perlUpgrade perl-ExtUtils-ConstantUpgrade perl-Tie-MemoizeUpgrade perl-FcntlUpgrade perl-Hash-Util-FieldHashUpgrade perl-TieUpgrade perl-TimeUpgrade perl-ThreadUpgrade perl-EnglishUpgrade perl-ODBM_FileUpgrade perl-Term-CompleteUpgrade perl-Time-PieceUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-Term-ReadLineUpgrade perl-SymbolUpgrade perl-File-BasenameUpgrade perl-NetUpgrade perl-mroUpgrade perl-interpreter-debuginfoUpgrade perl-ifUpgrade perl-IPC-Open3Upgrade perl-filetestUpgrade perl-baseUpgrade perl-File-CompareUpgrade perl-autouseUpgrade perl-GDBM_File-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-libs-debuginfoUpgrade perl-IOUpgrade perl-ExtUtils-EmbedUpgrade perl-I18N-LangTagsUpgrade perl-Unicode-UCDUpgrade perl-Module-LoadedUpgrade perl-debuginfoUpgrade perl-lessUpgrade perl-User-pwentUpgrade perl-overloadUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-sortUpgrade perl-mro-debuginfoUpgrade perl-macrosUpgrade perl-Getopt-StdUpgrade perl-FileHandleUpgrade perl-SafeUpgrade perl-DirHandleUpgrade perl-Tie-FileUpgrade perl-IO-debuginfoUpgrade perl-BenchmarkUpgrade perl-libnetcfgUpgrade perl-MemoizeUpgrade perl-localeUpgrade perl-interpreter | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-FcntlUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-UtilUpgrade perl-mroUpgrade perl-libs-debuginfoUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-interpreterUpgrade perlUpgrade perl-Fcntl-debuginfoUpgrade perl-Time-PieceUpgrade perl-BUpgrade perl-IO-debuginfoUpgrade perl-debuginfoUpgrade perl-ErrnoUpgrade perl-IOUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-ODBM_FileUpgrade perl-NDBM_File-debuginfoUpgrade perl-POSIXUpgrade perl-develUpgrade perl-B-debuginfoUpgrade perl-phUpgrade perl-I18N-LanginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-libUpgrade perl-NDBM_FileUpgrade perl-mro-debuginfoUpgrade perl-GDBM_FileUpgrade perl-Opcode-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-OpcodeUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-DynaLoaderUpgrade perl-debugsourceUpgrade perl-libsUpgrade perl-POSIX-debuginfoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Devel-PeekUpgrade perl-Hash-Util-FieldHashUpgrade perl-File-DosGlob-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub