Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-6517-1
HistoryNov 27, 2023 - 12:00 a.m.

Perl vulnerabilities

2023-11-2700:00:00
ubuntu.com
46
ubuntu 22.04 lts
ubuntu 20.04 lts
perl
denial of service
resource consumption
cve-2022-48522
regular expressions
crash
cve-2023-47038
arbitrary code

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON

Releases

  • Ubuntu 23.10
  • Ubuntu 23.04
  • Ubuntu 22.04 LTS
  • Ubuntu 20.04 LTS

Packages

  • perl - Practical Extraction and Report Language

Details

It was discovered that Perl incorrectly handled printing certain warning
messages. An attacker could possibly use this issue to cause Perl to
consume resources, leading to a denial of service. This issue only affected
Ubuntu 22.04 LTS. (CVE-2022-48522)

Nathan Mills discovered that Perl incorrectly handled certain regular
expressions. An attacker could use this issue to cause Perl to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2023-47038)

OSVersionArchitecturePackageVersionFilename
Ubuntu23.10noarchperl< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibperl-dev< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchlibperl5.36< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchperl-base< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchperl-debug< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchperl-doc< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.10noarchperl-modules-5.36< 5.36.0-9ubuntu1.1UNKNOWN
Ubuntu23.04noarchperl< 5.36.0-7ubuntu0.23.04.2UNKNOWN
Ubuntu23.04noarchlibperl-dev< 5.36.0-7ubuntu0.23.04.2UNKNOWN
Ubuntu23.04noarchlibperl5.36< 5.36.0-7ubuntu0.23.04.2UNKNOWN
Rows per page:
1-10 of 281

Related

cloudfoundry 1
nessus 19
osv 6
openvas 18
prion 2
debiancve 2
ubuntucve 3
redhatcve 3
alpinelinux 2
veracode 2
cvelist 2
cve 2
nvd 2
fedora 8
redhat 9
almalinux 2
oraclelinux 2
mageia 1
redos 1
f5 1
ibm 6
aix 1
hp 2
oracle 1
ics 1
cloudfoundry
cloudfoundry
USN-6517-1: Perl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Perl vulnerabilities (USN-6517-1)
2023-11-27 00:00:00
EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-3017)
2024-01-16 00:00:00
EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2023-3365)
2024-01-16 00:00:00
osv
osv
perl vulnerabilities
2023-11-27 14:15:35
CVE-2022-48522
2023-08-22 19:16:31
Moderate: perl security update
2024-04-30 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6517-1)
2023-11-28 00:00:00
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3040)
2023-10-31 00:00:00
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3383)
2023-12-14 00:00:00
prion
prion
Stack overflow
2023-08-22 19:16:00
Heap overflow
2023-12-18 14:15:00
debiancve
debiancve
CVE-2022-48522
2023-08-22 19:16:31
CVE-2023-47038
2023-12-18 14:15:08
ubuntucve
ubuntucve
CVE-2022-48522
2023-08-22 00:00:00
CVE-2023-47038
2023-11-25 00:00:00
CVE-2023-47100
2023-12-02 00:00:00
redhatcve
redhatcve
CVE-2022-48522
2023-08-24 13:46:39
CVE-2023-47038
2023-11-27 12:00:36
CVE-2023-47100
2023-12-21 05:00:32
alpinelinux
alpinelinux
CVE-2022-48522
2023-08-22 19:16:00
CVE-2023-47038
2023-12-18 14:15:08
veracode
veracode
Privilege Escalation
2023-08-30 22:22:22
Heap-based Buffer Overflow
2023-11-28 01:45:44
cvelist
cvelist
CVE-2022-48522
2023-08-22 00:00:00
CVE-2023-47038 Perl: write past buffer end via illegal user-defined unicode property
2023-12-18 13:43:07
cve
cve
CVE-2022-48522
2023-08-22 19:16:31
CVE-2023-47038
2023-12-18 14:15:08
nvd
nvd
CVE-2022-48522
2023-08-22 19:16:31
CVE-2023-47038
2023-12-18 14:15:08
fedora
fedora
[SECURITY] Fedora 38 Update: polymake-4.10-2.fc38
2023-12-17 01:43:04
[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39
2023-12-06 01:40:44
[SECURITY] Fedora 38 Update: perl-PAR-Packer-1.057-4.fc38
2023-12-17 01:43:04
redhat
redhat
(RHSA-2024:3128) Moderate: perl:5.32 security update
2024-05-22 06:35:41
(RHSA-2024:2228) Moderate: perl security update
2024-04-30 06:15:06
(RHSA-2024:3473) Moderate: OpenShift Virtualization 4.14.6 Images security update
2024-05-29 15:45:20
almalinux
almalinux
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
oraclelinux
oraclelinux
perl security update
2024-05-02 00:00:00
perl:5.32 security update
2024-05-24 00:00:00
mageia
mageia
Updated perl packages fix a security vulnerability
2024-02-04 05:49:27
redos
redos
ROS-20240405-10
2024-04-05 00:00:00
f5
f5
K000138640 : Perl vulnerability CVE-2023-47038
2024-02-17 00:00:00
ibm
ibm
Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)
2024-02-23 16:53:01
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
2024-07-18 11:16:35
Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)
2024-07-12 14:44:46
aix
aix
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)
2024-02-21 15:59:59
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

EPSS

0.006

Percentile

78.1%

JSON
Related for USN-6517-1
cloudfoundry1nessus19osv6openvas18prion2debiancve2ubuntucve3redhatcve3alpinelinux2veracode2cvelist2cve2nvd2fedora8redhat9almalinux2oraclelinux2mageia1redos1f51ibm6aix1hp2oracle1ics1