The vulnerability of the Perl programming language, related to buffer overflows in dynamic memory, allows attackers to cause system failures or execute arbitrary code.

🗓️ 29 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Perl dynamic memory buffer overflow may allow remote attackers to cause failures or execute code.

Reporter	Title	Published	Views	Family All 121
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	16 Jan 202614:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services - Multiple CVEs addressed (February 2024)	15 Apr 202502:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)	12 Jul 202415:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	18 Jul 202411:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	10 Nov 202508:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl [CVE-2023-47038]	3 Oct 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)	23 Feb 202416:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	8 Jan 202605:25	–	ibm
IBM Security Bulletins	Security Bulletin: Muliple security vulnerabilities found in TXSeries for Multiplatforms.	22 Apr 202614:18	–	ibm

Vulners

Node

canonical ubuntuMatch20.04

OR

canonical ubuntuMatch22.04

OR

canonical ubuntuMatch23.04

OR

canonical ubuntuMatch23.10

Source	Link
perldoc	www.perldoc.perl.org/perl5362delta
github	www.github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010
github	www.github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6
github	www.github.com/Perl/perl5/commit/92a9eb3d0d52ec7655c1beb29999a5a5219be664
vuldb	www.vuldb.com/ru/
vulners	www.vulners.com/debiancve/DEBIANCVE:CVE-2023-47038
ubuntu	www.ubuntu.com/security/CVE-2023-47038
ubuntu	www.ubuntu.com/security/notices/USN-6517-1
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
altsp	www.altsp.su/obnovleniya-bezopasnosti/

04 Mar 2026 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 37.3

CVSS 27.5

EPSS0.00832

Perl language buffer overflow dynamic memory remote attacker system failures execute code