A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5-develUpgrade perl5.38Upgrade perl5.40Upgrade perl5.36 | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perlUpgrade perl-libs | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-AutoLoaderUpgrade perl-Text-AbbrevUpgrade perl-macrosUpgrade perl-libnetcfgUpgrade perl-blibUpgrade perl-diagnosticsUpgrade perl-DumpvalueUpgrade perl-ExtUtils-EmbedUpgrade perl-ifUpgrade perl-Search-DictUpgrade perl-lessUpgrade perl-Term-CompleteUpgrade perl-BUpgrade perl-File-CompareUpgrade perl-Getopt-StdUpgrade perl-I18N-CollateUpgrade perl-SafeUpgrade perl-meta-notationUpgrade perl-FcntlUpgrade perl-File-statUpgrade perl-TimeUpgrade perl-DBM_FilterUpgrade perl-Devel-PeekUpgrade perl-File-BasenameUpgrade perl-openUpgrade perl-ThreadUpgrade perl-SymbolUpgrade perl-BenchmarkUpgrade perl-DirHandleUpgrade perl-interpreterUpgrade perl-vmsishUpgrade perl-File-FindUpgrade perl-overloadUpgrade perl-baseUpgrade perl-FindBinUpgrade perl-Thread-SemaphoreUpgrade perl-File-CopyUpgrade perl-IPC-Open3Upgrade perl-Attribute-HandlersUpgrade perl-Hash-Util-FieldHashUpgrade perl-Module-LoadedUpgrade perl-varsUpgrade perl-Tie-MemoizeUpgrade perl-Time-PieceUpgrade perl-autouseUpgrade perl-Class-StructUpgrade perl-SelfLoaderUpgrade perl-TieUpgrade perl-IOUpgrade perl-NetUpgrade perl-OpcodeUpgrade perl-debuggerUpgrade perl-FileHandleUpgrade perl-ErrnoUpgrade perl-Devel-SelfStubberUpgrade perl-develUpgrade perl-utilsUpgrade perl-Unicode-UCDUpgrade perl-DynaLoaderUpgrade perlUpgrade perl-ExtUtils-MiniperlUpgrade perl-mroUpgrade perl-Tie-FileUpgrade perl-SelectSaverUpgrade perl-Pod-FunctionsUpgrade perl-ODBM_FileUpgrade perl-NEXTUpgrade perl-filetestUpgrade perl-Term-ReadLineUpgrade perl-I18N-LangTagsUpgrade perl-EnglishUpgrade perl-encoding-warningsUpgrade perl-docUpgrade perl-fieldsUpgrade perl-ExtUtils-ConstantUpgrade perl-Math-ComplexUpgrade perl-Locale-Maketext-SimpleUpgrade perl-TestUpgrade perl-Hash-UtilUpgrade perl-overloadingUpgrade perl-localeUpgrade perl-FileCacheUpgrade perl-I18N-LanginfoUpgrade perl-libsUpgrade perl-POSIXUpgrade perl-libUpgrade perl-Sys-HostnameUpgrade perl-sigtrapUpgrade perl-User-pwentUpgrade perl-subsUpgrade perl-phUpgrade perl-AutoSplitUpgrade perl-File-DosGlobUpgrade perl-Pod-HtmlUpgrade perl-deprecateUpgrade perl-Config-ExtensionsUpgrade perl-sortUpgrade perl-MemoizeUpgrade perl-GDBM_FileUpgrade perl-NDBM_File | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-filetestUpgrade perl-File-BasenameUpgrade perl-mroUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-Peek-debuginfoUpgrade perl-User-pwentUpgrade perl-ThreadUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Pod-HtmlUpgrade perl-Tie-MemoizeUpgrade perl-debuginfoUpgrade perl-fieldsUpgrade perl-Module-LoadedUpgrade perl-ifUpgrade perl-FcntlUpgrade perl-openUpgrade perl-NetUpgrade perl-vmsishUpgrade perl-IPC-Open3Upgrade perl-interpreter-debuginfoUpgrade perl-ExtUtils-ConstantUpgrade perl-baseUpgrade perl-SymbolUpgrade perl-TieUpgrade perl-TimeUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-PieceUpgrade perl-Term-CompleteUpgrade perl-Time-Piece-debuginfoUpgrade perl-EnglishUpgrade perl-Unicode-UCDUpgrade perl-libs-debuginfoUpgrade perl-Locale-Maketext-SimpleUpgrade perl-I18N-LangTagsUpgrade perl-IOUpgrade perl-overloadUpgrade perl-ODBM_FileUpgrade perl-Term-ReadLineUpgrade perl-sortUpgrade perl-macrosUpgrade perl-mro-debuginfoUpgrade perl-File-CompareUpgrade perl-FileHandleUpgrade perl-DirHandleUpgrade perl-Getopt-StdUpgrade perl-ExtUtils-EmbedUpgrade perl-MemoizeUpgrade perl-libnetcfgUpgrade perl-interpreterUpgrade perl-localeUpgrade perl-diagnosticsUpgrade perl-File-statUpgrade perl-SafeUpgrade perl-autouseUpgrade perl-lessUpgrade perl-BenchmarkUpgrade perl-Sys-HostnameUpgrade perl-Tie-FileUpgrade perlUpgrade perl-meta-notationUpgrade perl-IO-debuginfoUpgrade perl-BUpgrade perl-GDBM_File-debuginfoUpgrade perl-POSIXUpgrade perl-Config-ExtensionsUpgrade perl-B-debuginfoUpgrade perl-Text-AbbrevUpgrade perl-NEXTUpgrade perl-File-DosGlobUpgrade perl-libsUpgrade perl-varsUpgrade perl-ODBM_File-debuginfoUpgrade perl-NDBM_FileUpgrade perl-develUpgrade perl-AutoLoaderNo solution existsUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Thread-SemaphoreUpgrade perl-Hash-UtilUpgrade perl-AutoSplitUpgrade perl-utilsUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Search-DictUpgrade perl-OpcodeUpgrade perl-sigtrapUpgrade perl-libUpgrade perl-File-FindUpgrade perl-ErrnoUpgrade perl-debuggerUpgrade perl-deprecateUpgrade perl-subsUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-encoding-warningsUpgrade perl-I18N-CollateUpgrade perl-POSIX-debuginfoUpgrade perl-debugsourceUpgrade perl-NDBM_File-debuginfoUpgrade perl-FindBinUpgrade perl-Attribute-HandlersUpgrade perl-GDBM_FileUpgrade perl-ExtUtils-MiniperlUpgrade perl-DynaLoaderUpgrade perl-DumpvalueUpgrade perl-I18N-LanginfoUpgrade perl-overloadingUpgrade perl-SelfLoaderUpgrade perl-Devel-PeekUpgrade perl-Devel-SelfStubberUpgrade perl-DBM_FilterUpgrade perl-Fcntl-debuginfoUpgrade perl-Pod-FunctionsUpgrade perl-TestUpgrade perl-FileCacheUpgrade perl-phUpgrade perl-docUpgrade perl-File-CopyUpgrade perl-Opcode-debuginfoUpgrade perl-Math-ComplexUpgrade perl-Class-StructUpgrade perl-SelectSaverUpgrade perl-blib | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-OpcodeUpgrade perl-NDBM_File-debuginfoUpgrade perl-File-DosGlobUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-libUpgrade perl-mro-debuginfoUpgrade perl-DynaLoaderUpgrade perl-Hash-Util-debuginfoUpgrade perl-POSIX-debuginfoUpgrade perl-POSIXUpgrade perl-debugsourceUpgrade perl-NDBM_FileUpgrade perl-Opcode-debuginfoUpgrade perl-B-debuginfoUpgrade perl-GDBM_FileUpgrade perl-develUpgrade perl-libsUpgrade perl-I18N-LanginfoUpgrade perl-Devel-PeekUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-phUpgrade perl-ODBM_FileUpgrade perlUpgrade perl-IOUpgrade perl-GDBM_File-debuginfoUpgrade perl-ErrnoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-IO-debuginfoUpgrade perl-Time-PieceUpgrade perl-Fcntl-debuginfoUpgrade perl-debuginfoUpgrade perl-BUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-mroUpgrade perl-Time-Piece-debuginfoUpgrade perl-Hash-UtilUpgrade perl-FcntlUpgrade perl-libs-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-interpreter | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub