Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk.
When such branches are combined into a trie, the delta between the first branch and the shared tail is stored in a 16-bit field. A branch count above 65535 overflows the field, and the trie's match decision table is truncated with no warning or error.
A pattern of this shape produces false positive matches (matching strings it should not) and false negative matches (failing to match strings it should). When such a pattern gates an access or filtering decision, the result is wrong.
CVSS Details
- CVSS 3.1 Base Score: 9.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Sep 25, 2026 | Jul 13, 2026 |
| Debian | — | Upgrade perl | Sep 21, 2026 | Jul 13, 2026 |
| Redhat_linux | — | Upgrade perl-Pod-CheckerUpgrade perl-IPC-SysV-debugsourceUpgrade perl-inc-latestUpgrade perl-Filter-debuginfoUpgrade perl-libnetUpgrade perl-Object-HashBaseUpgrade perl-PathTools-debugsourceUpgrade perl-TestUpgrade perl-versionUpgrade perl-generatorsUpgrade perl-Compress-Raw-Lzma-debugsourceUpgrade perl-NetUpgrade perl-Sys-SyslogUpgrade perl-Config-ExtensionsUpgrade perl-User-pwentUpgrade perl-Text-ParseWordsUpgrade perl-ExtUtils-ParseXSUpgrade perl-Compress-Raw-Bzip2-debuginfoUpgrade perl-debuggerUpgrade perl-testsUpgrade perl-Data-OptListUpgrade perl-I18N-LangTagsUpgrade perl-EncodeUpgrade perl-debugsourceUpgrade perl-filetestUpgrade perl-experimentalUpgrade perl-ExtUtils-ConstantUpgrade perl-Math-BigInt-FastCalc-debuginfoUpgrade perl-encodingUpgrade perl-threadsUpgrade perl-localeUpgrade perl-Compress-Raw-Zlib-debuginfoUpgrade perl-Fcntl-debuginfoUpgrade perl-CPAN-DistnameInfoUpgrade perl-AutoSplitUpgrade perl-FilterUpgrade perl-Text-TemplateUpgrade perl-Digest-MD5-debuginfoUpgrade perl-subsUpgrade perl-Encode-debuginfoUpgrade perl-autouseUpgrade perl-Math-ComplexUpgrade perl-develUpgrade perl-IO-ZlibUpgrade perl-IO-debuginfoUpgrade perl-Compress-Raw-Bzip2Upgrade perl-podlatorsUpgrade perl-Module-Load-ConditionalUpgrade perl-deprecateUpgrade perl-DynaLoaderUpgrade perl-Compress-Raw-Zlib-debugsourceUpgrade perl-libsUpgrade perl-NDBM_File-debuginfoUpgrade perl-ODBM_File-debuginfoUpgrade perl-overloadingUpgrade perl-MRO-CompatUpgrade perl-phUpgrade perl-EnglishUpgrade perl-Module-MetadataUpgrade perl-mroUpgrade perl-Text-GlobUpgrade perl-Params-Util-debuginfoUpgrade perl-encoding-warningsUpgrade perl-Devel-Size-debugsourceUpgrade perl-local-libUpgrade perl-File-WhichUpgrade perl-utilsUpgrade perl-Module-BuildUpgrade perl-Unicode-Collate-debuginfoUpgrade perl-FileHandleUpgrade perl-I18N-LanginfoUpgrade perl-File-FindUpgrade perl-IPC-CmdUpgrade perl-constantUpgrade perl-Data-Dumper-debuginfoUpgrade perl-Encode-LocaleUpgrade perl-POSIX-debuginfoUpgrade perl-File-DosGlobUpgrade perl-IPC-SysVUpgrade perl-Devel-Peek-debuginfoUpgrade perl-NEXTUpgrade perl-URIUpgrade perl-Params-Util-debugsourceUpgrade perl-Scalar-List-Utils-debuginfoUpgrade perl-Unicode-UCDUpgrade perl-Math-BigIntUpgrade perl-Storable-debugsourceUpgrade perl-Unicode-Collate-debugsourceUpgrade perl-ExtUtils-MM-UtilsUpgrade perl-threads-shared-debuginfoUpgrade perl-FindBinUpgrade perl-Locale-MaketextUpgrade perl-NDBM_FileUpgrade perl-GDBM_FileUpgrade perl-Devel-SelfStubberUpgrade perl-ExtUtils-CommandUpgrade perl-Compress-Raw-Lzma-debuginfoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-Unicode-CollateUpgrade perl-IO-Compress-LzmaUpgrade perl-ODBM_FileUpgrade perl-DB_File-debuginfoUpgrade perl-Module-CoreListUpgrade perl-MIME-Base64-debugsourceUpgrade perl-POSIXUpgrade perl-Test-HarnessUpgrade perl-B-debuginfoUpgrade perl-Class-StructUpgrade perl-DynaLoader-debuginfoUpgrade perl-Time-LocalUpgrade perl-Pod-HtmlUpgrade perl-SelectSaverUpgrade perl-sigtrapUpgrade perl-ExtUtils-MiniperlUpgrade perl-GDBM_File-debuginfoUpgrade perl-Getopt-LongUpgrade perl-libUpgrade perl-SocketUpgrade perl-Socket-debugsourceUpgrade perl-Pod-PerldocUpgrade perl-Pod-FunctionsUpgrade perl-threads-debugsourceUpgrade perl-Module-LoadUpgrade perl-PathToolsUpgrade perl-IPC-System-SimpleUpgrade perl-sortUpgrade perl-FileCacheUpgrade perl-Hash-UtilUpgrade perl-ImporterUpgrade perl-Unicode-Normalize-debuginfoUpgrade perl-CPAN-MetaUpgrade perl-Data-SectionUpgrade perl-Algorithm-DiffUpgrade perl-DB_FileNo solution existsUpgrade perlUpgrade perl-Encode-develUpgrade perl-Devel-SizeUpgrade perl-version-debuginfoUpgrade perl-Test-SimpleUpgrade perl-Time-HiRes-debugsourceUpgrade perl-SymbolUpgrade perl-EnvUpgrade perl-Perl-OSTypeUpgrade perl-ThreadUpgrade perl-DigestUpgrade perl-Hash-Util-debuginfoUpgrade perl-Term-ANSIColorUpgrade perl-Scalar-List-Utils-debugsourceUpgrade perl-debuginfoUpgrade perl-CPAN-Meta-RequirementsUpgrade perl-ExtUtils-InstallUpgrade perl-PathTools-debuginfoUpgrade perl-Compress-Bzip2-debuginfoUpgrade perl-SafeUpgrade perl-Digest-SHA-debuginfoUpgrade perl-Compress-Raw-Bzip2-debugsourceUpgrade perl-DirHandleUpgrade perl-bignumUpgrade perl-openUpgrade perl-IO-CompressUpgrade perl-mro-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-Math-BigRatUpgrade perl-TimeUpgrade perl-DB_File-debugsourceUpgrade perl-Socket-debuginfoUpgrade perl-libs-debuginfoUpgrade perl-Term-ReadLineUpgrade perl-Attribute-HandlersUpgrade perl-Scalar-List-UtilsUpgrade perl-Devel-PeekUpgrade perl-vmsishUpgrade perl-Unicode-Normalize-debugsourceUpgrade perl-Sys-Syslog-debugsourceUpgrade perl-Sys-HostnameUpgrade perl-Pod-SimpleUpgrade perl-Math-BigInt-FastCalc-debugsourceUpgrade perl-IO-Socket-IPUpgrade perl-IOUpgrade perl-DumpvalueUpgrade perl-diagnosticsUpgrade perl-Devel-Size-debuginfoUpgrade perl-blibUpgrade perl-AutoLoaderUpgrade perl-MemoizeUpgrade perl-Text-Tabs+WrapUpgrade perl-File-BasenameUpgrade perl-Filter-SimpleUpgrade perl-Tie-RefHashUpgrade perl-ifUpgrade perl-File-PathUpgrade perl-ExtUtils-ManifestUpgrade perl-docUpgrade perl-DBM_FilterUpgrade perl-Data-Dumper-debugsourceUpgrade perl-Data-DumperUpgrade perl-Compress-Raw-ZlibUpgrade perl-threads-debuginfoUpgrade perl-Text-AbbrevUpgrade perl-Storable-debuginfoUpgrade perl-StorableUpgrade perl-Search-DictUpgrade perl-Pod-ParserUpgrade perl-Params-UtilUpgrade perl-lessUpgrade perl-JSON-PPUpgrade perl-Devel-PPPort-debuginfoUpgrade perl-Pod-EscapesUpgrade perl-HTTP-TinyUpgrade perl-Pod-UsageUpgrade perl-Devel-PPPortUpgrade perl-Term-CapUpgrade perl-meta-notationUpgrade perl-libnetcfgUpgrade perl-interpreterUpgrade perl-homedirUpgrade perl-Config-Perl-VUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Digest-SHA-debugsourceUpgrade perl-Package-GeneratorUpgrade perl-Time-PieceUpgrade perl-CPANUpgrade perl-Digest-MD5Upgrade perl-Compress-Raw-LzmaUpgrade perl-parentUpgrade perl-FcntlUpgrade perl-Object-HashBase-toolsUpgrade perl-autodieUpgrade perl-Time-HiResUpgrade perl-MIME-Base64Upgrade perl-TieUpgrade perl-Text-BalancedUpgrade perl-Sub-InstallUpgrade perl-Module-LoadedUpgrade perl-Devel-PPPort-debugsourceUpgrade perl-ExporterUpgrade perl-fieldsUpgrade perl-SelfLoaderUpgrade perl-File-HomeDirUpgrade perl-ErrnoUpgrade perl-CarpUpgrade perl-ExtUtils-EmbedUpgrade perl-File-TempUpgrade perl-Thread-SemaphoreUpgrade perl-MIME-Base64-debuginfoUpgrade perl-Getopt-StdUpgrade perl-Fedora-VSPUpgrade perl-Time-Piece-debuginfoUpgrade perl-Tie-MemoizeUpgrade perl-Software-LicenseUpgrade perl-Net-PingUpgrade perl-Math-BigInt-FastCalcUpgrade perl-Filter-debugsourceUpgrade perl-File-FetchUpgrade perl-BUpgrade perl-Archive-TarUpgrade perl-Tie-FileUpgrade perl-Digest-SHAUpgrade perl-threads-sharedUpgrade perl-Thread-QueueUpgrade perl-Encode-debugsourceUpgrade perl-CPAN-Meta-YAMLUpgrade perl-Compress-Bzip2-debugsourceUpgrade perl-BenchmarkUpgrade perl-baseUpgrade perl-PerlIO-via-QuotedPrintUpgrade perl-perlfaqUpgrade perl-Opcode-debuginfoUpgrade perl-OpcodeUpgrade perl-macrosUpgrade perl-Locale-Maketext-SimpleUpgrade perl-IPC-SysV-debuginfoUpgrade perl-IPC-Open3Upgrade perl-interpreter-debuginfoUpgrade perl-I18N-CollateUpgrade perl-File-statUpgrade perl-File-DosGlob-debuginfoUpgrade perl-File-CompareUpgrade perl-Term-CompleteUpgrade perl-Text-DiffUpgrade perl-Sub-ExporterUpgrade perl-overloadUpgrade perl-ExtUtils-CBuilderUpgrade perl-Compress-Bzip2Upgrade perl-File-CopyUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-Digest-MD5-debugsourceUpgrade perl-Archive-ZipUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-version-debugsourceUpgrade perl-Unicode-NormalizeUpgrade perl-Sys-Syslog-debuginfoUpgrade perl-Params-CheckUpgrade perl-Module-CoreList-toolsUpgrade perl-threads-shared-debugsourceUpgrade perl-Time-HiRes-debuginfoUpgrade perl-Term-TableUpgrade perl-vars | Aug 26, 2026 | Jul 13, 2026 |
| Rocky_linux | — | Upgrade perl-Devel-PPPort-debuginfoUpgrade perl-I18N-Langinfo-debuginfoUpgrade perl-MIME-Base64-debuginfoUpgrade perl-MIME-Base64Upgrade perl-Sys-HostnameUpgrade perl-Sys-Syslog-debugsourceUpgrade perl-Scalar-List-UtilsUpgrade perl-version-debuginfoUpgrade perl-DB_FileUpgrade perl-threads-debugsourceUpgrade perl-Storable-debugsourceUpgrade perl-Digest-MD5-debugsourceUpgrade perl-Compress-Raw-ZlibUpgrade perl-Hash-Util-debuginfoUpgrade perl-Time-Piece-debuginfoUpgrade perl-Compress-Bzip2Upgrade perl-Compress-Raw-Lzma-debuginfoUpgrade perl-Hash-Util-FieldHashUpgrade perl-Socket-debuginfoUpgrade perl-interpreterUpgrade perl-Digest-SHA-debugsourceUpgrade perl-Unicode-NormalizeUpgrade perl-Math-BigInt-FastCalcUpgrade perl-Time-PieceUpgrade perl-Sys-SyslogUpgrade perl-DynaLoader-debuginfoUpgrade perl-Devel-PeekUpgrade perl-libUpgrade perl-Compress-Raw-Bzip2-debugsourceUpgrade perl-PathToolsUpgrade perl-Compress-Raw-LzmaUpgrade perl-Digest-SHA-debuginfoUpgrade perl-Devel-PPPortUpgrade perl-threads-shared-debugsourceUpgrade perl-Data-DumperUpgrade perl-FilterUpgrade perl-libs-debuginfoUpgrade perl-Opcode-debuginfoUpgrade perl-Unicode-Normalize-debugsourceUpgrade perl-IPC-SysVUpgrade perl-Sys-Hostname-debuginfoUpgrade perl-Digest-SHAUpgrade perl-macrosUpgrade perl-PathTools-debuginfoUpgrade perl-interpreter-debuginfoUpgrade perl-SocketUpgrade perl-threads-debuginfoUpgrade perl-threads-sharedUpgrade perl-Compress-Raw-Bzip2-debuginfoUpgrade perl-OpcodeUpgrade perl-Compress-Raw-Zlib-debugsourceUpgrade perl-File-DosGlob-debuginfoUpgrade perl-Encode-debuginfoUpgrade perlUpgrade perl-Encode-debugsourceUpgrade perl-version-debugsourceUpgrade perl-B-debuginfoUpgrade perl-ErrnoUpgrade perl-Hash-Util-FieldHash-debuginfoUpgrade perl-debuginfoUpgrade perl-BUpgrade perl-Encode-develUpgrade perl-Compress-Bzip2-debugsourceUpgrade perl-Devel-PPPort-debugsourceUpgrade perl-DB_File-debuginfoUpgrade perl-Digest-MD5Upgrade perl-Compress-Raw-Bzip2Upgrade perl-Time-HiRes-debugsourceUpgrade perl-Math-BigInt-FastCalc-debugsourceUpgrade perl-Unicode-Collate-debuginfoUpgrade perl-Time-HiRes-debuginfoUpgrade perl-Socket-debugsourceUpgrade perl-Params-Util-debugsourceUpgrade perl-threads-shared-debuginfoUpgrade perl-threadsUpgrade perl-Sys-Syslog-debuginfoUpgrade perl-phUpgrade perl-libsUpgrade perl-IO-debuginfoUpgrade perl-Data-Dumper-debugsourceUpgrade perl-Data-Dumper-debuginfoUpgrade perl-Unicode-Collate-debugsourceUpgrade perl-Unicode-CollateUpgrade perl-POSIX-debuginfoUpgrade perl-Params-UtilUpgrade perl-DynaLoaderUpgrade perl-Devel-Peek-debuginfoUpgrade perl-develUpgrade perl-debugsourceUpgrade perl-Compress-Raw-Zlib-debuginfoUpgrade perl-Scalar-List-Utils-debugsourceUpgrade perl-Time-HiResUpgrade perl-GDBM_File-debuginfoUpgrade perl-encodingUpgrade perl-Storable-debuginfoUpgrade perl-PathTools-debugsourceUpgrade perl-Params-Util-debuginfoUpgrade perl-testsUpgrade perl-Filter-debuginfoUpgrade perl-Devel-Size-debuginfoUpgrade perl-IOUpgrade perl-IPC-SysV-debugsourceUpgrade perl-mro-debuginfoUpgrade perl-Digest-MD5-debuginfoUpgrade perl-POSIXUpgrade perl-NDBM_FileUpgrade perl-ODBM_File-debuginfoUpgrade perl-I18N-LanginfoUpgrade perl-Unicode-Normalize-debuginfoUpgrade perl-Math-BigInt-FastCalc-debuginfoUpgrade perl-ODBM_FileUpgrade perl-IPC-SysV-debuginfoUpgrade perl-Hash-UtilUpgrade perl-GDBM_FileUpgrade perl-Filter-debugsourceUpgrade perl-Devel-Size-debugsourceUpgrade perl-DB_File-debugsourceUpgrade perl-Compress-Bzip2-debuginfoUpgrade perl-StorableUpgrade perl-Scalar-List-Utils-debuginfoUpgrade perl-MIME-Base64-debugsourceUpgrade perl-FcntlUpgrade perl-EncodeUpgrade perl-NDBM_File-debuginfoUpgrade perl-versionUpgrade perl-Compress-Raw-Lzma-debugsourceUpgrade perl-Devel-SizeUpgrade perl-mroUpgrade perl-File-DosGlobUpgrade perl-Fcntl-debuginfo | Sep 16, 2026 | Sep 14, 2026 |
| Ubuntu | — | Upgrade perl-modules-5.30 (Ubuntu Pro)Upgrade libperl5.30 (Ubuntu Pro)Upgrade perlUpgrade libperl5.40Upgrade perl-modules-5.26 (Ubuntu Pro)Upgrade libperl5.18 (Ubuntu Pro)Upgrade perl-modules-5.34Upgrade perl-modules (Ubuntu Pro)Upgrade libperl5.26 (Ubuntu Pro)Upgrade perl-baseUpgrade libperl5.34Upgrade libperl5.22 (Ubuntu Pro)Upgrade perl-modules-5.38Upgrade perl-base (Ubuntu Pro)Upgrade perl-modules-5.22 (Ubuntu Pro)Upgrade perl-modules-5.40 | Aug 26, 2026 | Aug 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 10, 2026 | Jul 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub