Lucene search
HistoryJan 13, 2012 - 6:55 p.m.
CVE-2011-2939
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.9%
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
Affected configurations
Node
dan_kogaiencode_moduleRangeβ€2.43
ORdan_kogaiencode_moduleMatch0.93
ORdan_kogaiencode_moduleMatch0.94
ORdan_kogaiencode_moduleMatch0.95
ORdan_kogaiencode_moduleMatch0.96
ORdan_kogaiencode_moduleMatch0.97
ORdan_kogaiencode_moduleMatch0.98
ORdan_kogaiencode_moduleMatch0.99
ORdan_kogaiencode_moduleMatch1.00
ORdan_kogaiencode_moduleMatch1.01
ORdan_kogaiencode_moduleMatch1.10
ORdan_kogaiencode_moduleMatch1.11
ORdan_kogaiencode_moduleMatch1.20
ORdan_kogaiencode_moduleMatch1.21
ORdan_kogaiencode_moduleMatch1.25
ORdan_kogaiencode_moduleMatch1.26
ORdan_kogaiencode_moduleMatch1.28
ORdan_kogaiencode_moduleMatch1.30
ORdan_kogaiencode_moduleMatch1.31
ORdan_kogaiencode_moduleMatch1.32
ORdan_kogaiencode_moduleMatch1.33
ORdan_kogaiencode_moduleMatch1.34
ORdan_kogaiencode_moduleMatch1.40
ORdan_kogaiencode_moduleMatch1.41
ORdan_kogaiencode_moduleMatch1.42
ORdan_kogaiencode_moduleMatch1.50
ORdan_kogaiencode_moduleMatch1.51
ORdan_kogaiencode_moduleMatch1.52
ORdan_kogaiencode_moduleMatch1.53
ORdan_kogaiencode_moduleMatch1.54
ORdan_kogaiencode_moduleMatch1.55
ORdan_kogaiencode_moduleMatch1.56
ORdan_kogaiencode_moduleMatch1.57
ORdan_kogaiencode_moduleMatch1.58
ORdan_kogaiencode_moduleMatch1.59
ORdan_kogaiencode_moduleMatch1.60
ORdan_kogaiencode_moduleMatch1.61
ORdan_kogaiencode_moduleMatch1.62
ORdan_kogaiencode_moduleMatch1.63
ORdan_kogaiencode_moduleMatch1.64
ORdan_kogaiencode_moduleMatch1.65
ORdan_kogaiencode_moduleMatch1.66
ORdan_kogaiencode_moduleMatch1.67
ORdan_kogaiencode_moduleMatch1.68
ORdan_kogaiencode_moduleMatch1.69
ORdan_kogaiencode_moduleMatch1.70
ORdan_kogaiencode_moduleMatch1.71
ORdan_kogaiencode_moduleMatch1.72
ORdan_kogaiencode_moduleMatch1.73
ORdan_kogaiencode_moduleMatch1.74
ORdan_kogaiencode_moduleMatch1.75
ORdan_kogaiencode_moduleMatch1.76
ORdan_kogaiencode_moduleMatch1.77
ORdan_kogaiencode_moduleMatch1.78
ORdan_kogaiencode_moduleMatch1.79
ORdan_kogaiencode_moduleMatch1.80
ORdan_kogaiencode_moduleMatch1.81
ORdan_kogaiencode_moduleMatch1.82
ORdan_kogaiencode_moduleMatch1.83
ORdan_kogaiencode_moduleMatch1.84
ORdan_kogaiencode_moduleMatch1.85
ORdan_kogaiencode_moduleMatch1.86
ORdan_kogaiencode_moduleMatch1.87
ORdan_kogaiencode_moduleMatch1.88
ORdan_kogaiencode_moduleMatch1.89
ORdan_kogaiencode_moduleMatch1.90
ORdan_kogaiencode_moduleMatch1.91
ORdan_kogaiencode_moduleMatch1.92
ORdan_kogaiencode_moduleMatch1.93
ORdan_kogaiencode_moduleMatch1.94
ORdan_kogaiencode_moduleMatch1.95
ORdan_kogaiencode_moduleMatch1.96
ORdan_kogaiencode_moduleMatch1.97
ORdan_kogaiencode_moduleMatch1.98
ORdan_kogaiencode_moduleMatch1.99
ORdan_kogaiencode_moduleMatch2.0
ORdan_kogaiencode_moduleMatch2.01
ORdan_kogaiencode_moduleMatch2.02
ORdan_kogaiencode_moduleMatch2.03
ORdan_kogaiencode_moduleMatch2.04
ORdan_kogaiencode_moduleMatch2.05
ORdan_kogaiencode_moduleMatch2.06
ORdan_kogaiencode_moduleMatch2.07
ORdan_kogaiencode_moduleMatch2.08
ORdan_kogaiencode_moduleMatch2.09
ORdan_kogaiencode_moduleMatch2.10
ORdan_kogaiencode_moduleMatch2.11
ORdan_kogaiencode_moduleMatch2.12
ORdan_kogaiencode_moduleMatch2.13
ORdan_kogaiencode_moduleMatch2.14
ORdan_kogaiencode_moduleMatch2.15
ORdan_kogaiencode_moduleMatch2.16
ORdan_kogaiencode_moduleMatch2.17
ORdan_kogaiencode_moduleMatch2.18
ORdan_kogaiencode_moduleMatch2.19
ORdan_kogaiencode_moduleMatch2.20
ORdan_kogaiencode_moduleMatch2.21
ORdan_kogaiencode_moduleMatch2.22
ORdan_kogaiencode_moduleMatch2.23
ORdan_kogaiencode_moduleMatch2.24
ORdan_kogaiencode_moduleMatch2.25
ORdan_kogaiencode_moduleMatch2.26
ORdan_kogaiencode_moduleMatch2.27
ORdan_kogaiencode_moduleMatch2.28
ORdan_kogaiencode_moduleMatch2.29
ORdan_kogaiencode_moduleMatch2.30
ORdan_kogaiencode_moduleMatch2.31
ORdan_kogaiencode_moduleMatch2.32
ORdan_kogaiencode_moduleMatch2.33
ORdan_kogaiencode_moduleMatch2.34
ORdan_kogaiencode_moduleMatch2.35
ORdan_kogaiencode_moduleMatch2.36
ORdan_kogaiencode_moduleMatch2.37
ORdan_kogaiencode_moduleMatch2.38
ORdan_kogaiencode_moduleMatch2.39
ORdan_kogaiencode_moduleMatch2.40
ORdan_kogaiencode_moduleMatch2.41
ORdan_kogaiencode_moduleMatch2.42
ORperlperlRangeβ€5.14.2
ORperlperlMatch5.8.1
ORperlperlMatch5.8.2
ORperlperlMatch5.8.3
ORperlperlMatch5.8.4
ORperlperlMatch5.8.5
ORperlperlMatch5.8.6
ORperlperlMatch5.8.7
ORperlperlMatch5.8.8
ORperlperlMatch5.8.9
ORperlperlMatch5.8.10
ORperlperlMatch5.9.2
ORperlperlMatch5.10
ORperlperlMatch5.10.0
ORperlperlMatch5.10.0rc1
ORperlperlMatch5.10.0rc2
ORperlperlMatch5.10.1
ORperlperlMatch5.10.1rc1
ORperlperlMatch5.10.1rc2
ORperlperlMatch5.11.0
ORperlperlMatch5.11.1
ORperlperlMatch5.11.2
ORperlperlMatch5.11.3
ORperlperlMatch5.11.4
ORperlperlMatch5.11.5
ORperlperlMatch5.12.0
ORperlperlMatch5.12.0rc0
ORperlperlMatch5.12.0rc1
ORperlperlMatch5.12.0rc2
ORperlperlMatch5.12.0rc3
ORperlperlMatch5.12.0rc4
ORperlperlMatch5.12.0rc5
ORperlperlMatch5.12.1
ORperlperlMatch5.12.1rc1
ORperlperlMatch5.12.1rc2
ORperlperlMatch5.12.2
ORperlperlMatch5.12.2rc1
ORperlperlMatch5.12.3
ORperlperlMatch5.12.3rc1
ORperlperlMatch5.12.3rc2
ORperlperlMatch5.12.3rc3
ORperlperlMatch5.13.0
ORperlperlMatch5.13.1
ORperlperlMatch5.13.2
ORperlperlMatch5.13.3
ORperlperlMatch5.13.4
ORperlperlMatch5.13.5
ORperlperlMatch5.13.6
ORperlperlMatch5.13.7
ORperlperlMatch5.13.8
ORperlperlMatch5.13.9
ORperlperlMatch5.13.10
ORperlperlMatch5.13.11
ORperlperlMatch5.14.0
ORperlperlMatch5.14.0rc1
ORperlperlMatch5.14.0rc2
ORperlperlMatch5.14.0rc3
ORperlperlMatch5.14.1
References
cpansearch.perl.org/src/FLORA/perl-5.14.2/pod/perldelta.pod
perl5.git.perl.org/perl.git/commitdiff/e46d973584785af1f445c4dedbee4243419cb860#patch5
search.cpan.org/~flora/perl-5.14.2/pod/perldelta.pod#Encode_decode_xs_n-byte_heap-overflow_%28CVE-2011-2939%29
secunia.com/advisories/46172
secunia.com/advisories/46989
secunia.com/advisories/51457
secunia.com/advisories/55314
www.mandriva.com/security/advisories?name=MDVSA-2012:008
www.openwall.com/lists/oss-security/2011/08/18/8
www.openwall.com/lists/oss-security/2011/08/19/17
www.redhat.com/support/errata/RHSA-2011-1424.html
www.securityfocus.com/bid/49858
www.ubuntu.com/usn/USN-1643-1
bugzilla.redhat.com/show_bug.cgi?id=731246
Related
ubuntucve
ubuntucve
CVE-2011-2939
2012-01-13 00:00:00
debiancve
debiancve
CVE-2011-2939
2012-01-13 18:55:02
altlinux
altlinux
cve
cve
CVE-2011-2939
2012-01-13 18:55:02
nessus
nessus
openSUSE Security Update : perl (openSUSE-SU-2011:1278-1)
2014-06-13 00:00:00
openSUSE Security Update : perl (openSUSE-SU-2011:1278-1)
2014-06-13 00:00:00
openSUSE Security Update : icedtea-web (openSUSE-SU-2011:1251-1)
2014-06-13 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:04:11
cvelist
cvelist
CVE-2011-2939
2012-01-13 18:00:00
prion
prion
Heap overflow
2012-01-13 18:55:00
redhat
redhat
(RHSA-2011:1424) Moderate: perl security update
2011-11-03 00:00:00
openvas
openvas
Mandriva Update for perl MDVSA-2012:008 (perl)
2012-01-20 00:00:00
Amazon Linux: Security Advisory (ALAS-2011-19)
2015-09-08 00:00:00
Mandriva Update for perl MDVSA-2012:008 (perl)
2012-01-20 00:00:00
amazon
amazon
Medium: perl
2011-11-09 21:48:00
fedora
fedora
[SECURITY] Fedora 14 Update: perl-5.12.4-147.fc14
2011-11-03 00:22:52
securityvulns
securityvulns
perl security vulnerabilities
2012-01-20 00:00:00
perl multiple security vulnerabilities
2012-12-02 00:00:00
[USN-1643-1] Perl vulnerabilities
2012-12-02 00:00:00
seebug
seebug
oraclelinux
oraclelinux
perl security update
2011-11-03 00:00:00
f5
f5
gentoo
gentoo
Perl, Locale Maketext Perl module: Multiple vulnerabilities
2014-01-19 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2012-11-30 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
High
0.017 Low
EPSS
Percentile
87.9%
Related for NVD:CVE-2011-2939