The vulnerability of the Perl programming language interpreter, related to the execution of operations beyond the buffer boundaries in memory, allows attackers to trigger a service failure.

🗓️ 26 Aug 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The Perl interpreter vulnerability allows buffer boundary overflow that can cause remote service failures.

Reporter	Title	Published	Views	Family All 174
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	26 Mar 202504:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Perl affect AIX (CVE-2020-10543, CVE-2020-10878, and CVE-2020-12723)	4 Mar 202117:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Perl affects IBM watsonx.data	18 Sep 202416:58	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security contains security vulnerabilities	13 May 202121:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to multiple vulnerabilities in Perl	11 Jul 202313:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2020-10543).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Cloud Pak for Security uses packages that are vulnerable to several CVEs	19 Oct 202115:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2020-10543)	25 May 202316:58	–	ibm

Vulners

Node

oracle communications_billing_and_revenue_managementMatch12.0.0.3.0

OR

oracle communications_billing_and_revenue_managementMatch12.0.0.2.0

OR

novell opensuse_leapMatch15.1

OR

fedora fedoraMatch31

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
github	www.github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
github	www.github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed
github	www.github.com/Perl/perl5/compare/v5.30.2...v5.30.3
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-10543
security	www.security.gentoo.org/glsa/202006-03
security	www.security.netapp.com/advisory/ntap-20200611-0001/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-10543
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20201207SE16MD

16 Sep 2024 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 38.2

CVSS 28.5

EPSS0.04289

Perl interpreter Buffer overflow Remote exploitation Service failure Memory safety