A heap buffer overflow vulnerability was discovered in Perl.
Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10.
When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
$ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped)
It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 8, 2025 | Apr 13, 2025 |
| Debian | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Freebsd | — | Upgrade perl5.36Upgrade perl5.38Upgrade perl5.40Upgrade perl5-devel | Apr 16, 2025 | Apr 15, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade perlUpgrade perl-libs | Jun 13, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade perl-libsUpgrade perl | Jul 21, 2025 | Apr 13, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade perl-libsUpgrade perl | Jul 1, 2025 | Apr 13, 2025 |
| Ibm Aix | — | Apply the fix or workaround for perl_advisory10 | Sep 25, 2025 | Jun 26, 2025 |
| Oracle_linux | — | Upgrade perl-I18N-LangTagsUpgrade perl-File-DosGlobUpgrade perl-EnglishUpgrade perl-deprecateUpgrade perl-Math-ComplexUpgrade perl-subsUpgrade perl-MemoizeUpgrade perl-phUpgrade perl-ErrnoUpgrade perl-Term-ReadLineUpgrade perlUpgrade perl-NDBM_FileUpgrade perl-encoding-warningsUpgrade perl-ExtUtils-MiniperlUpgrade perl-GDBM_FileUpgrade perl-mroUpgrade perl-Config-ExtensionsUpgrade perl-sigtrapUpgrade perl-DynaLoaderUpgrade perl-debuggerUpgrade perl-docUpgrade perl-Locale-Maketext-SimpleUpgrade perl-filetestUpgrade perl-AutoSplitUpgrade perl-Pod-HtmlUpgrade perl-Sys-HostnameUpgrade perl-develUpgrade perl-Devel-SelfStubberUpgrade perl-NEXTUpgrade perl-ODBM_FileUpgrade perl-FileHandleUpgrade perl-Pod-FunctionsUpgrade perl-sortUpgrade perl-ExtUtils-ConstantUpgrade perl-fieldsUpgrade perl-SelectSaverUpgrade perl-User-pwentUpgrade perl-Unicode-UCDUpgrade perl-Tie-FileUpgrade perl-utilsUpgrade perl-POSIXUpgrade perl-libsUpgrade perl-FileCacheUpgrade perl-overloadingUpgrade perl-TestUpgrade perl-Hash-UtilUpgrade perl-localeUpgrade perl-I18N-LanginfoUpgrade perl-libUpgrade perl-interpreterUpgrade perl-meta-notationUpgrade perl-ThreadUpgrade perl-SymbolUpgrade perl-openUpgrade perl-File-CopyUpgrade perl-File-BasenameUpgrade perl-Devel-PeekUpgrade perl-DBM_FilterUpgrade perl-AutoLoaderUpgrade perl-TimeUpgrade perl-Attribute-HandlersUpgrade perl-Hash-Util-FieldHashUpgrade perl-DirHandleUpgrade perl-BenchmarkUpgrade perl-vmsishUpgrade perl-File-FindUpgrade perl-Getopt-StdUpgrade perl-Term-CompleteUpgrade perl-I18N-CollateUpgrade perl-BUpgrade perl-Search-DictUpgrade perl-baseUpgrade perl-Thread-SemaphoreUpgrade perl-overloadUpgrade perl-FindBinUpgrade perl-File-CompareUpgrade perl-FcntlUpgrade perl-IPC-Open3Upgrade perl-File-statUpgrade perl-SafeUpgrade perl-Module-LoadedUpgrade perl-Time-PieceUpgrade perl-Tie-MemoizeUpgrade perl-SelfLoaderUpgrade perl-OpcodeUpgrade perl-NetUpgrade perl-IOUpgrade perl-Class-StructUpgrade perl-autouseUpgrade perl-TieUpgrade perl-libnetcfgUpgrade perl-lessUpgrade perl-macrosUpgrade perl-ifUpgrade perl-ExtUtils-EmbedUpgrade perl-DumpvalueUpgrade perl-diagnosticsUpgrade perl-blibUpgrade perl-Text-AbbrevUpgrade perl-vars | Jul 10, 2025 | Apr 13, 2025 |
| Redhat_linux | — | Upgrade perl-autouseUpgrade perl-IOUpgrade perl-GDBM_File-debuginfoUpgrade perl-BUpgrade perl-Locale-Maketext-SimpleUpgrade perl-libs-debuginfoUpgrade perl-I18N-LangTagsUpgrade perl-File-CompareUpgrade perl-Getopt-StdUpgrade perl-SafeUpgrade perl-FileHandleUpgrade perl-mro-debuginfoUpgrade perl-sortUpgrade perl-Term-CompleteUpgrade perl-TieUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-PieceUpgrade perl-FcntlUpgrade perl-Module-LoadedUpgrade perl-EnglishUpgrade perl-Time-Piece-debuginfoUpgrade perl-Unicode-UCDUpgrade perl-ThreadUpgrade perl-File-BasenameUpgrade perl-User-pwentUpgrade perl-SymbolUpgrade perl-vmsishUpgrade perl-Devel-Peek-debuginfoUpgrade perl-TimeUpgrade perl-ifUpgrade perl-baseUpgrade perl-overloadUpgrade perl-filetestUpgrade perl-macrosUpgrade perl-ExtUtils-ConstantUpgrade perl-Sys-HostnameUpgrade perl-mroUpgrade perl-ExtUtils-EmbedUpgrade perl-NetUpgrade perlUpgrade perl-ODBM_FileUpgrade perl-Term-ReadLineUpgrade perl-meta-notationUpgrade perl-Tie-FileUpgrade perl-diagnosticsUpgrade perl-libnetcfgUpgrade perl-File-statUpgrade perl-localeUpgrade perl-IO-debuginfoUpgrade perl-MemoizeUpgrade perl-lessUpgrade perl-openUpgrade perl-Tie-MemoizeUpgrade perl-interpreterUpgrade perl-fieldsUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-DirHandleUpgrade perl-Pod-HtmlUpgrade perl-BenchmarkUpgrade perl-Hash-Util-FieldHashUpgrade perl-IPC-Open3Upgrade perl-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-Attribute-HandlersUpgrade perl-blibUpgrade perl-I18N-LanginfoUpgrade perl-ExtUtils-MiniperlUpgrade perl-libsUpgrade perl-File-DosGlobUpgrade perl-DynaLoaderUpgrade perl-DumpvalueUpgrade perl-Search-DictUpgrade perl-GDBM_FileUpgrade perl-File-FindUpgrade perl-NEXTUpgrade perl-AutoLoaderUpgrade perl-encoding-warningsUpgrade perl-debugsourceUpgrade perl-Class-StructUpgrade perl-I18N-CollateUpgrade perl-FindBinUpgrade perl-POSIX-debuginfoUpgrade perl-SelectSaverUpgrade perl-NDBM_File-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-utilsUpgrade perl-Thread-SemaphoreUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Hash-UtilUpgrade perl-Config-ExtensionsUpgrade perl-B-debuginfoUpgrade perl-AutoSplitUpgrade perl-overloadingUpgrade perl-DBM_FilterUpgrade perl-Text-AbbrevUpgrade perl-ODBM_File-debuginfoUpgrade perl-Devel-SelfStubberNo solution existsUpgrade perl-varsUpgrade perl-POSIXUpgrade perl-NDBM_FileUpgrade perl-subsUpgrade perl-develUpgrade perl-Math-ComplexUpgrade perl-sigtrapUpgrade perl-libUpgrade perl-ErrnoUpgrade perl-debuggerUpgrade perl-deprecateUpgrade perl-SelfLoaderUpgrade perl-OpcodeUpgrade perl-File-CopyUpgrade perl-TestUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-Pod-FunctionsUpgrade perl-Opcode-debuginfoUpgrade perl-phUpgrade perl-FileCacheUpgrade perl-Devel-PeekUpgrade perl-doc | Jul 9, 2025 | Apr 13, 2025 |
| Rocky_linux | — | Upgrade perl-POSIX-debuginfoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-libUpgrade perl-DynaLoaderUpgrade perl-mro-debuginfoUpgrade perl-POSIXUpgrade perl-NDBM_File-debuginfoUpgrade perl-NDBM_FileUpgrade perl-I18N-LanginfoUpgrade perl-debugsourceUpgrade perl-File-DosGlobUpgrade perl-GDBM_FileUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-phUpgrade perl-libsUpgrade perl-Hash-Util-FieldHashUpgrade perl-Devel-PeekUpgrade perl-ODBM_File-debuginfoUpgrade perl-OpcodeUpgrade perl-Opcode-debuginfoUpgrade perl-B-debuginfoUpgrade perl-develUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Hash-Util-debuginfoUpgrade perl-GDBM_File-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-debuginfoUpgrade perl-Time-PieceUpgrade perl-BUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-IOUpgrade perl-Time-Piece-debuginfoUpgrade perl-mroUpgrade perl-ErrnoUpgrade perl-Devel-Peek-debuginfoUpgrade perl-Sys-HostnameUpgrade perl-ODBM_FileUpgrade perl-libs-debuginfoUpgrade perl-Hash-UtilUpgrade perl-interpreter-debuginfoUpgrade perl-FcntlUpgrade perl-IO-debuginfoUpgrade perl-interpreterUpgrade perl | Oct 6, 2025 | Oct 3, 2025 |
| Ubuntu | — | Upgrade perl | Apr 15, 2025 | Apr 13, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub