Internet Bug Bounty: [CVE-2018-6913] heap-buffer-overflow in S_pack_rec

🗓️ 20 May 2018 14:35:28Reported by karasType

hackerone

hackerone🔗 hackerone.com👁 55 Views

CVE-2018-6913 heap-buffer-overflow in S_pack_rec function of Perl leads to memory write overflow, impacting security

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-6913).	12 Jan 202321:59	–	ibm
FreeBSD	perl -- multiple vulnerabilities	14 Apr 201800:00	–	freebsd
Tenable Nessus	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Debian DLA-1345-1 : perl security update	16 Apr 201800:00	–	nessus
Tenable Nessus	Debian DSA-4172-1 : perl - security update	16 Apr 201800:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.3.0 : perl (EulerOS-SA-2019-2326)	3 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : perl (EulerOS-SA-2020-1421)	15 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : perl (EulerOS-SA-2020-2380)	3 Nov 202000:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Perl vulnerability (K000141301)	1 Oct 202400:00	–	nessus

31 Oct 2018 22:58Current

9.1High risk

Vulners AI Score9.1

EPSS0.03896

$1000

perl cve-2018-6913 heap-buffer-overflow s_pack_rec security flaw integer overflow memory write overflow public security advisory