Lucene search

K
nvd[email protected]NVD:CVE-2020-10878
HistoryJun 05, 2020 - 2:15 p.m.

CVE-2020-10878

2020-06-0514:15:10
CWE-190
web.nvd.nist.gov
1

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

Perl before 5.30.3 has an integer overflow related to mishandling of a “PL_regkind[OP(n)] == NOTHING” situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Affected configurations

NVD
Node
perlperlRange<5.30.3
Node
fedoraprojectfedoraMatch31
Node
opensuseleapMatch15.1
Node
netapponcommand_workflow_automationMatch-
OR
netappsnap_creator_frameworkMatch-
Node
oraclecommunications_billing_and_revenue_managementMatch12.0.0.2.0
OR
oraclecommunications_billing_and_revenue_managementMatch12.0.0.3.0
OR
oraclecommunications_diameter_signaling_routerRange8.0.08.5.0
OR
oraclecommunications_eagle_application_processorRange16.1.016.4.0
OR
oraclecommunications_eagle_lnp_application_processorMatch10.1
OR
oraclecommunications_eagle_lnp_application_processorMatch10.2
OR
oraclecommunications_eagle_lnp_application_processorMatch46.7
OR
oraclecommunications_eagle_lnp_application_processorMatch46.8
OR
oraclecommunications_eagle_lnp_application_processorMatch46.9
OR
oraclecommunications_lsmsRange13.113.4
OR
oraclecommunications_offline_mediation_controllerMatch12.0.0.3.0
OR
oraclecommunications_performance_intelligence_centerRange10.3.0.0.010.3.0.2.1
OR
oraclecommunications_performance_intelligence_centerRange10.4.0.1.010.4.0.3.1
OR
oraclecommunications_pricing_design_centerMatch12.0.0.3.0
OR
oracleconfiguration_managerMatch12.1.2.0.8
OR
oracleenterprise_manager_base_platformMatch13.4.0.0
OR
oraclesd-wan_awareMatch8.2
OR
oraclesd-wan_awareMatch9.0
OR
oraclesd-wan_awareMatch9.1
OR
oracletekelec_platform_distributionRange7.4.07.7.1

References

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

8.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%