A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5.38Upgrade perl5.40Upgrade perl5-devel | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perl-libsUpgrade perl | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perlUpgrade perl-libs | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perl-libsUpgrade perl | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-SelectSaverUpgrade perl-Term-ReadLineUpgrade perl-debuggerUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Math-ComplexUpgrade perl-mroUpgrade perl-I18N-LanginfoUpgrade perl-develUpgrade perl-EnglishUpgrade perl-sigtrapUpgrade perl-User-pwentUpgrade perl-ODBM_FileUpgrade perl-libUpgrade perl-I18N-LangTagsUpgrade perl-overloadingUpgrade perl-ExtUtils-MiniperlUpgrade perl-localeUpgrade perl-docUpgrade perl-encoding-warningsUpgrade perl-Hash-UtilUpgrade perl-ExtUtils-ConstantUpgrade perl-Unicode-UCDUpgrade perl-utilsUpgrade perl-Tie-FileUpgrade perl-Devel-SelfStubberUpgrade perl-Pod-FunctionsUpgrade perl-ErrnoUpgrade perl-NEXTUpgrade perl-sortUpgrade perl-TestUpgrade perl-FileCacheUpgrade perl-AutoSplitUpgrade perl-libsUpgrade perl-FileHandleUpgrade perl-phUpgrade perl-subsUpgrade perl-POSIXUpgrade perl-Config-ExtensionsUpgrade perl-DynaLoaderUpgrade perl-Sys-HostnameUpgrade perl-fieldsUpgrade perl-GDBM_FileUpgrade perl-MemoizeUpgrade perl-deprecateUpgrade perl-Pod-HtmlUpgrade perl-File-DosGlobUpgrade perl-filetestUpgrade perlUpgrade perl-NDBM_FileUpgrade perl-Search-DictUpgrade perl-meta-notationUpgrade perl-I18N-CollateUpgrade perl-varsUpgrade perl-DirHandleUpgrade perl-Attribute-HandlersUpgrade perl-openUpgrade perl-File-CopyUpgrade perl-TimeUpgrade perl-Hash-Util-FieldHashUpgrade perl-Class-StructUpgrade perl-SymbolUpgrade perl-Text-AbbrevUpgrade perl-libnetcfgUpgrade perl-macrosUpgrade perl-lessUpgrade perl-ifUpgrade perl-ExtUtils-EmbedUpgrade perl-DumpvalueUpgrade perl-blibUpgrade perl-diagnosticsUpgrade perl-overloadUpgrade perl-Thread-SemaphoreUpgrade perl-SafeUpgrade perl-File-statUpgrade perl-File-FindUpgrade perl-FcntlUpgrade perl-NetUpgrade perl-autouseUpgrade perl-Time-PieceUpgrade perl-Tie-MemoizeUpgrade perl-SelfLoaderUpgrade perl-OpcodeUpgrade perl-IOUpgrade perl-FindBinUpgrade perl-baseUpgrade perl-File-CompareUpgrade perl-BUpgrade perl-Term-CompleteUpgrade perl-Getopt-StdUpgrade perl-File-BasenameUpgrade perl-DBM_FilterUpgrade perl-IPC-Open3Upgrade perl-TieUpgrade perl-Devel-PeekUpgrade perl-ThreadUpgrade perl-BenchmarkUpgrade perl-AutoLoaderUpgrade perl-vmsishUpgrade perl-Module-LoadedUpgrade perl-interpreter | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-Term-CompleteUpgrade perl-TimeUpgrade perl-Time-PieceUpgrade perl-TieUpgrade perl-EnglishUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-ODBM_FileUpgrade perl-mroUpgrade perl-IPC-Open3Upgrade perl-File-BasenameUpgrade perl-Module-LoadedUpgrade perl-Devel-Peek-debuginfoUpgrade perl-filetestUpgrade perl-Pod-HtmlUpgrade perl-baseUpgrade perl-FcntlUpgrade perl-Hash-Util-FieldHashUpgrade perl-interpreter-debuginfoUpgrade perl-SymbolUpgrade perlUpgrade perl-ExtUtils-ConstantUpgrade perl-Sys-HostnameUpgrade perl-Tie-MemoizeUpgrade perl-lessUpgrade perl-overloadUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-openUpgrade perl-macrosUpgrade perl-FileHandleUpgrade perl-IO-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-Tie-FileUpgrade perl-BenchmarkUpgrade perl-debuginfoUpgrade perl-fieldsUpgrade perl-MemoizeUpgrade perl-interpreterUpgrade perl-localeUpgrade perl-diagnosticsUpgrade perl-Getopt-StdUpgrade perl-SafeUpgrade perl-User-pwentUpgrade perl-BUpgrade perl-Unicode-UCDUpgrade perl-sortUpgrade perl-ThreadUpgrade perl-File-statUpgrade perl-DirHandleUpgrade perl-meta-notationUpgrade perl-Term-ReadLineUpgrade perl-libnetcfgUpgrade perl-NetUpgrade perl-autouseUpgrade perl-IOUpgrade perl-Locale-Maketext-SimpleUpgrade perl-libs-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-ExtUtils-EmbedUpgrade perl-ifUpgrade perl-vmsishUpgrade perl-File-CompareUpgrade perl-GDBM_File-debuginfoUpgrade perl-SelfLoaderUpgrade perl-libsUpgrade perl-Attribute-HandlersUpgrade perl-sigtrapUpgrade perl-GDBM_FileUpgrade perl-File-DosGlobUpgrade perl-DumpvalueUpgrade perl-I18N-LanginfoUpgrade perl-DynaLoaderUpgrade perl-deprecateUpgrade perl-debugsourceUpgrade perl-AutoLoaderUpgrade perl-Math-ComplexUpgrade perl-ODBM_File-debuginfoUpgrade perl-overloadingUpgrade perl-Text-AbbrevUpgrade perl-DBM_FilterUpgrade perl-Devel-SelfStubberUpgrade perl-develUpgrade perl-File-DosGlob-debuginfoUpgrade perl-AutoSplitUpgrade perl-Config-ExtensionsUpgrade perl-B-debuginfoUpgrade perl-Thread-SemaphoreUpgrade perl-Hash-UtilUpgrade perl-utilsUpgrade perl-NEXTUpgrade perl-ExtUtils-MiniperlUpgrade perl-encoding-warningsUpgrade perl-Class-StructUpgrade perl-Search-DictUpgrade perl-ErrnoUpgrade perl-File-FindUpgrade perl-debuggerUpgrade perl-I18N-CollateUpgrade perl-libUpgrade perl-blibUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-subsUpgrade perl-TestUpgrade perl-File-CopyUpgrade perl-Devel-PeekUpgrade perl-NDBM_FileUpgrade perl-varsUpgrade perl-POSIXUpgrade perl-OpcodeUpgrade perl-POSIX-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-FindBinUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-SelectSaverUpgrade perl-Pod-FunctionsNo solution existsUpgrade perl-phUpgrade perl-FileCacheUpgrade perl-Fcntl-debuginfoUpgrade perl-doc | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-B-debuginfoUpgrade perl-POSIXUpgrade perl-phUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-DynaLoaderUpgrade perl-Hash-Util-debuginfoUpgrade perl-NDBM_File-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-develUpgrade perl-libUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-File-DosGlobUpgrade perl-OpcodeUpgrade perl-debugsourceUpgrade perl-GDBM_FileUpgrade perl-libsUpgrade perl-Opcode-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-mro-debuginfoUpgrade perl-NDBM_FileUpgrade perl-I18N-LanginfoUpgrade perl-POSIX-debuginfoUpgrade perl-ODBM_FileUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Hash-UtilUpgrade perl-IOUpgrade perl-GDBM_File-debuginfoUpgrade perl-ErrnoUpgrade perl-Fcntl-debuginfoUpgrade perl-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-mroUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Time-PieceUpgrade perl-libs-debuginfoUpgrade perl-FcntlUpgrade perl-BUpgrade perlUpgrade perl-interpreterUpgrade perl-IO-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-Sys-Hostname | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub