Perl Buffer Overflow Vulnerability

🗓️ 03 Dec 2018 00:00:00Reported by China National Vulnerability DatabaseType

Buffer overflow in Perl_my_setenv before 5.26.3 and before 5.28.1 allows DoS or arbitrary code via crafted regex.

Reporter	Title	Published	Views	Family All 142
IBM Security Bulletins	Security Bulletin: IBM MQ Cloud Paks are vulnerable to multiple vulnerabilities in Perl (CVE-2018-18312 CVE-2018-18313 CVE-2018-18314 CVE-2018-18311)	30 Jan 201911:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-18311).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities have been fixed in the IBM Security Access Manager Appliance	30 May 201921:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by multiple security vulnerabilities	19 Aug 201920:44	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Perl affects PowerKVM	4 Mar 201905:55	–	ibm
Tenable Nessus	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Amazon Linux 2 : perl (ALAS-2019-1166)	8 Mar 201900:00	–	nessus
Tenable Nessus	Amazon Linux AMI : perl (ALAS-2019-1180)	26 Mar 201900:00	–	nessus

Vulners

Node

perl perlRange<5.26.3

perl *_<1Range<5.28.1

Source	Link
securitytracker	www.securitytracker.com/id/1042181

03 Mar 2019 00:00Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 39.8

EPSS0.1291