CPANSA-perl-2018-6798: perl vulnerability
Publisher |
giterlizzi |
Document category |
csaf_security_advisory |
Initial release date |
2018-04-17T00:00:00 |
Engine |
CSAF Perl Toolkit 0.25 |
Current release date |
2018-04-17T00:00:00 |
Build Date |
|
Current version |
1 |
Status |
final |
CVSS v3.1 Base Score |
7.5
|
Severity |
High
|
Original language |
|
Language |
en |
Also referred to |
|
Vulnerability Description
An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.
Vulnerabilities
CVE-2018-6798
Vulnerability DescriptionAn issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.
Weakness |
CWE-125 : Out-of-bounds Read
|
Product status
Known affected
Product |
Score |
perl greater than or equal 5.22.0 and less than 5.24.4 |
|
perl greater than or equal 5.26.0 and less than 5.28.2 |
|
Fixed
- perl greater than or equal 5.28.0
giterlizzi
Namespace: https://github.com/giterlizzi/
gdt@cpan.org
References
Revision history
Version |
Date of the revision |
Summary of the revision |
1 |
Tue Apr 17 00:00:00 2018 |
First release |
Sharing rules
TLP:WHITE
For the TLP version see: https://www.first.org/tlp/