A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5.38Upgrade perl5-develUpgrade perl5.40 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perlUpgrade perl-libs | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-Thread-SemaphoreUpgrade perl-overloadUpgrade perl-baseUpgrade perl-BUpgrade perl-Text-AbbrevUpgrade perl-Module-LoadedUpgrade perl-Hash-Util-FieldHashUpgrade perl-varsUpgrade perl-File-statUpgrade perl-meta-notationUpgrade perl-FcntlUpgrade perl-SafeUpgrade perl-Term-CompleteUpgrade perl-Search-DictUpgrade perl-I18N-CollateUpgrade perl-File-CompareUpgrade perl-FindBinUpgrade perl-Getopt-StdUpgrade perl-IPC-Open3Upgrade perl-AutoLoaderUpgrade perl-TimeUpgrade perl-SymbolUpgrade perl-BenchmarkUpgrade perl-vmsishUpgrade perl-interpreterUpgrade perl-File-BasenameUpgrade perl-Devel-PeekUpgrade perl-DBM_FilterUpgrade perl-DirHandleUpgrade perl-openUpgrade perl-File-CopyUpgrade perl-ThreadUpgrade perl-File-FindUpgrade perl-Attribute-HandlersUpgrade perl-Time-PieceUpgrade perl-Tie-MemoizeUpgrade perl-SelfLoaderUpgrade perl-OpcodeUpgrade perl-NetUpgrade perl-IOUpgrade perl-Class-StructUpgrade perl-autouseUpgrade perl-TieUpgrade perl-libnetcfgUpgrade perl-lessUpgrade perl-macrosUpgrade perl-ifUpgrade perl-ExtUtils-EmbedUpgrade perl-DumpvalueUpgrade perl-diagnosticsUpgrade perl-blibUpgrade perl-Config-ExtensionsUpgrade perlUpgrade perl-deprecateUpgrade perl-sortUpgrade perl-subsUpgrade perl-mroUpgrade perl-ExtUtils-ConstantUpgrade perl-FileHandleUpgrade perl-fieldsUpgrade perl-ODBM_FileUpgrade perl-libUpgrade perl-overloadingUpgrade perl-develUpgrade perl-Devel-SelfStubberUpgrade perl-SelectSaverUpgrade perl-docUpgrade perl-Sys-HostnameUpgrade perl-I18N-LanginfoUpgrade perl-Tie-FileUpgrade perl-Pod-HtmlUpgrade perl-Math-ComplexUpgrade perl-DynaLoaderUpgrade perl-NDBM_FileUpgrade perl-File-DosGlobUpgrade perl-phUpgrade perl-AutoSplitUpgrade perl-User-pwentUpgrade perl-debuggerUpgrade perl-ExtUtils-MiniperlUpgrade perl-sigtrapUpgrade perl-GDBM_FileUpgrade perl-Unicode-UCDUpgrade perl-filetestUpgrade perl-NEXTUpgrade perl-libsUpgrade perl-POSIXUpgrade perl-Pod-FunctionsUpgrade perl-utilsUpgrade perl-ErrnoUpgrade perl-Hash-UtilUpgrade perl-localeUpgrade perl-I18N-LangTagsUpgrade perl-TestUpgrade perl-EnglishUpgrade perl-encoding-warningsUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Term-ReadLineUpgrade perl-MemoizeUpgrade perl-FileCache | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-File-CompareUpgrade perl-meta-notationUpgrade perl-Time-PieceUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-EnglishUpgrade perl-autouseUpgrade perl-ExtUtils-EmbedUpgrade perl-I18N-LangTagsUpgrade perl-GDBM_File-debuginfoUpgrade perl-openUpgrade perl-Pod-HtmlUpgrade perl-fieldsUpgrade perl-libs-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-ExtUtils-ConstantUpgrade perlUpgrade perl-IOUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Term-CompleteUpgrade perl-SymbolUpgrade perl-Sys-HostnameUpgrade perl-filetestUpgrade perl-ThreadUpgrade perl-File-BasenameUpgrade perl-Term-ReadLineUpgrade perl-IPC-Open3Upgrade perl-Hash-Util-FieldHashUpgrade perl-Module-LoadedUpgrade perl-overloadUpgrade perl-ifUpgrade perl-interpreterUpgrade perl-macrosUpgrade perl-sortUpgrade perl-baseUpgrade perl-debuginfoUpgrade perl-BUpgrade perl-File-statUpgrade perl-diagnosticsUpgrade perl-libnetcfgUpgrade perl-IO-debuginfoUpgrade perl-FileHandleUpgrade perl-BenchmarkUpgrade perl-DirHandleUpgrade perl-mro-debuginfoUpgrade perl-MemoizeUpgrade perl-Tie-FileUpgrade perl-localeUpgrade perl-ODBM_FileUpgrade perl-Getopt-StdUpgrade perl-SafeUpgrade perl-FcntlUpgrade perl-TimeUpgrade perl-TieUpgrade perl-User-pwentUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-mroUpgrade perl-Unicode-UCDUpgrade perl-NetUpgrade perl-lessUpgrade perl-interpreter-debuginfoUpgrade perl-vmsishUpgrade perl-Pod-FunctionsUpgrade perl-ErrnoUpgrade perl-FileCacheUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-I18N-CollateUpgrade perl-File-FindUpgrade perl-Hash-UtilUpgrade perl-docUpgrade perl-Opcode-debuginfoUpgrade perl-OpcodeUpgrade perl-DumpvalueUpgrade perl-DynaLoaderUpgrade perl-NEXTUpgrade perl-GDBM_FileUpgrade perl-File-DosGlobUpgrade perl-ExtUtils-MiniperlUpgrade perl-overloadingUpgrade perl-B-debuginfoUpgrade perl-DBM_FilterUpgrade perl-Devel-SelfStubberUpgrade perl-Text-AbbrevUpgrade perl-ODBM_File-debuginfoUpgrade perl-sigtrapUpgrade perl-Thread-SemaphoreUpgrade perl-Config-ExtensionsUpgrade perl-File-DosGlob-debuginfoUpgrade perl-subsNo solution existsUpgrade perl-develUpgrade perl-varsUpgrade perl-POSIXUpgrade perl-AutoLoaderUpgrade perl-deprecateUpgrade perl-TestUpgrade perl-libUpgrade perl-I18N-LanginfoUpgrade perl-libsUpgrade perl-utilsUpgrade perl-AutoSplitUpgrade perl-debuggerUpgrade perl-Search-DictUpgrade perl-phUpgrade perl-Fcntl-debuginfoUpgrade perl-SelfLoaderUpgrade perl-Math-ComplexUpgrade perl-Devel-PeekUpgrade perl-File-CopyUpgrade perl-NDBM_FileUpgrade perl-FindBinUpgrade perl-blibUpgrade perl-encoding-warningsUpgrade perl-Class-StructUpgrade perl-Attribute-HandlersUpgrade perl-debugsourceUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-SelectSaverUpgrade perl-NDBM_File-debuginfoUpgrade perl-POSIX-debuginfo | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-Hash-Util-debuginfoUpgrade perl-libUpgrade perl-phUpgrade perl-B-debuginfoUpgrade perl-develUpgrade perl-GDBM_FileUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-libsUpgrade perl-ODBM_File-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-DynaLoaderUpgrade perl-I18N-LanginfoUpgrade perl-POSIX-debuginfoUpgrade perl-File-DosGlobUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-debugsourceUpgrade perl-POSIXUpgrade perl-OpcodeUpgrade perl-NDBM_FileUpgrade perl-ODBM_FileUpgrade perl-GDBM_File-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-interpreter-debuginfoUpgrade perl-Hash-UtilUpgrade perl-FcntlUpgrade perl-interpreterUpgrade perl-libs-debuginfoUpgrade perl-IOUpgrade perl-Devel-Peek-debuginfoUpgrade perl-ErrnoUpgrade perl-Time-PieceUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-mroUpgrade perl-Time-Piece-debuginfoUpgrade perl-BUpgrade perl-Fcntl-debuginfoUpgrade perl-debuginfoUpgrade perlUpgrade perl-IO-debuginfo | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub