Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade perl | Aug 30, 2017 | Dec 17, 2012 |
| Centos_linux | — | Upgrade perl-suidperlUpgrade perl-Pod-SimpleUpgrade perl-Params-CheckUpgrade perl-ExtUtils-ParseXSUpgrade perl-CPANPLUSUpgrade perl-Module-PluggableUpgrade perl-parentUpgrade perl-Compress-Raw-ZlibUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IPC-CmdUpgrade perl-IO-Compress-Bzip2Upgrade perl-Locale-Maketext-SimpleUpgrade perl-IO-ZlibUpgrade perl-libsUpgrade perl-Module-LoadUpgrade perl-versionUpgrade perl-Module-LoadedUpgrade perlUpgrade perl-Object-AccessorUpgrade perl-IO-Compress-ZlibUpgrade perl-coreUpgrade perl-Digest-SHAUpgrade perl-Module-BuildUpgrade perl-Archive-ExtractUpgrade perl-Time-PieceUpgrade perl-Archive-TarUpgrade perl-IO-Compress-BaseUpgrade perl-Compress-ZlibUpgrade perl-Module-CoreListUpgrade perl-Package-ConstantsUpgrade perl-Log-Message-SimpleUpgrade perl-ExtUtils-EmbedUpgrade perl-File-FetchUpgrade perl-Pod-EscapesUpgrade perl-Test-HarnessUpgrade perl-Log-MessageUpgrade perl-Time-HiResUpgrade perl-Test-SimpleUpgrade perl-Term-UIUpgrade perl-Module-Load-ConditionalUpgrade perl-develUpgrade perl-CPANUpgrade perl-CGIUpgrade perl-ExtUtils-CBuilderUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Parse-CPAN-Meta | Dec 1, 2016 | Dec 17, 2012 |
| Debian | — | Upgrade perl | Jul 30, 2024 | Dec 18, 2012 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Sep 15, 2015 |
| Gentoo Linux | — | Upgrade perl-core/Locale-Maketext.Upgrade dev-lang/perl. | Oct 30, 2017 | Dec 17, 2012 |
| Oracle Solaris | — | Upgrade runtime/perl-584/extra to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade consolidation/osnet/osnet-incorporation to version 0.5.11-0.175.2.0.0.42.2 on Solaris 11.2Upgrade runtime/perl-584 to version 5.8.4-0.175.1.7.0.5.2 on Solaris 11.1Upgrade runtime/perl-512 to version 5.12.5-0.175.1.7.0.2.0 on Solaris 11.1 | May 29, 2017 | Dec 17, 2012 |
| Oracle_linux | — | Upgrade perl-Pod-EscapesUpgrade perl-Log-MessageUpgrade perl-ExtUtils-EmbedUpgrade perl-Time-PieceUpgrade perl-Time-HiResUpgrade perl-Package-ConstantsUpgrade perl-IO-Compress-ZlibUpgrade perl-Compress-Raw-ZlibUpgrade perl-suidperlUpgrade perl-ExtUtils-MakeMakerUpgrade perl-Locale-Maketext-SimpleUpgrade perl-Object-AccessorUpgrade perl-Module-CoreListUpgrade perl-Archive-ExtractUpgrade perl-parentUpgrade perl-Log-Message-SimpleUpgrade perl-File-FetchUpgrade perl-ExtUtils-CBuilderUpgrade perl-Parse-CPAN-MetaUpgrade perl-coreUpgrade perl-CGIUpgrade perl-Term-UIUpgrade perl-IO-Compress-Bzip2Upgrade perl-Params-CheckUpgrade perl-Test-SimpleUpgrade perlUpgrade perl-Pod-SimpleUpgrade perl-Module-Load-ConditionalUpgrade perl-Test-HarnessUpgrade perl-Digest-SHAUpgrade perl-IO-ZlibUpgrade perl-CPANUpgrade perl-Compress-ZlibUpgrade perl-IPC-CmdUpgrade perl-CPANPLUSUpgrade perl-Archive-TarUpgrade perl-Module-BuildUpgrade perl-Compress-Raw-Bzip2Upgrade perl-IO-Compress-BaseUpgrade perl-Module-LoadUpgrade perl-libsUpgrade perl-versionUpgrade perl-ExtUtils-ParseXSUpgrade perl-develUpgrade perl-Module-LoadedUpgrade perl-Module-Pluggable | Oct 16, 2024 | Dec 18, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 10, 2012 |
| Ubuntu | — | Upgrade perl | Nov 8, 2024 | Dec 18, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub