CPANSA-perl-2010-1158: perl vulnerability

Publisher	giterlizzi	Document category	csaf_security_advisory
Initial release date	2010-04-20T00:00:00	Engine	CSAF Perl Toolkit 0.25
Current release date	2010-04-20T00:00:00	Build Date
Current version	1	Status	final
CVSS v3.1 Base Score		Severity
Original language		Language	en
Also referred to

Vulnerability Description

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.

Vulnerabilities

CVE-2010-1158

Vulnerability Description

Weakness	CWE-189 : Numeric Errors

Product status

Known affected

Product

Score

perl less than 5.10.0

CVSS Version	CVSS Vector	CVSS Base Score	CVSS Base Severity
2.0	AV:N/AC:L/Au:N/C:N/I:N/A:P	5.0	Medium

Fixed

perl greater than or equal 5.10.0

giterlizzi

Namespace: https://github.com/giterlizzi/

gdt@cpan.org

References

CPANSA-perl-2010-1158 JSON self
https://raw.githubusercontent.com/giterlizzi/perl-CPANSA-CSAF/develop/csaf/white/2010/cpansa-perl-2010-1158.json
http://bugs.gentoo.org/show_bug.cgi?id=313565 external
http://bugs.gentoo.org/show_bug.cgi?id=313565
http://www.openwall.com/lists/oss-security/2010/04/14/3 external
http://www.openwall.com/lists/oss-security/2010/04/14/3
http://perldoc.perl.org/perl5100delta.html external
http://perldoc.perl.org/perl5100delta.html
http://www.openwall.com/lists/oss-security/2010/04/08/9 external
http://www.openwall.com/lists/oss-security/2010/04/08/9
https://bugzilla.redhat.com/show_bug.cgi?id=580605 external
https://bugzilla.redhat.com/show_bug.cgi?id=580605
http://secunia.com/advisories/55314 external
http://secunia.com/advisories/55314
CVE-2010-1158 (NVD) external
https://nvd.nist.gov/vuln/detail/CVE-2010-1158

Revision history

Version	Date of the revision	Summary of the revision
1	Tue Apr 20 00:00:00 2010	First release

Sharing rules

TLP:WHITE
For the TLP version see: https://www.first.org/tlp/