PT-2017-3767

🗓️ 24 Jun 2017 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbu.gs👁 3 Views

Buffer overflow in Perl regular expression processing allows arbitrary code execution.

Reporter	Title	Published	Views	Family All 149
IBM Security Bulletins	Security Bulletin: IBM MQ Cloud Paks are vulnerable to multiple vulnerabilities in Perl (CVE-2018-18312 CVE-2018-18313 CVE-2018-18314 CVE-2018-18311)	30 Jan 201911:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect has addressed multiple vulnerabilities in Developer Portal's dependencies - Cumulative list from June 28, 2018 to December 13, 2018	28 Jan 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-18312).	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition (ITNM).	29 Jan 202504:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-18313)	12 Jan 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-18314).	12 Jan 202321:59	–	ibm
Tenable Nessus	macOS 10.14.x < 10.14.4 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: perl / perl-Attribute-Handlers / perl-AutoLoader / perl-AutoSplit / etc Multiple Vulnerabilities (ciqsa-2026_1588)	6 Oct 202600:00	–	nessus
Tenable Nessus	Debian DSA-4347-1 : perl - security update	30 Nov 201800:00	–	nessus

Source	Link
suse	www.suse.com/security/cve/CVE-2018-18314
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2018-18314
ubuntu	www.ubuntu.com/security/notices/USN-3834-1
securitytracker	www.securitytracker.com/id/1042181
access	www.access.redhat.com/errata/RHSA-2019:0010
osv	www.osv.dev/vulnerability/CVE-2018-18314
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-18314
osv	www.osv.dev/vulnerability/CLEANSTART-2026-WW27643
osv	www.osv.dev/vulnerability/DEBIAN-CVE-2018-18314
osv	www.osv.dev/vulnerability/DSA-4347-1

18 Sep 2026 00:00Current

CVSS 3.19.8

CVSS 27.5

CVSS 39.8

EPSS0.12768

Perl buffer overflow arbitrary code execution regular expression