CVE-2018-6913

🗓️ 28 Jan 2020 04:15:07Reported by redhat.comType

The pack() function in 32-bit perl interpreter is vulnerable to heap buffer overflow via specially crafted templat

Reporter	Title	Published	Views	Family All 113
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a heap-based buffer overflow in Perl (CVE-2018-6913).	12 Jan 202321:59	–	ibm
FreeBSD	perl -- multiple vulnerabilities	14 Apr 201800:00	–	freebsd
Tenable Nessus	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	10 Apr 201900:00	–	nessus
Tenable Nessus	Debian DLA-1345-1 : perl security update	16 Apr 201800:00	–	nessus
Tenable Nessus	Debian DSA-4172-1 : perl - security update	16 Apr 201800:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.3.0 : perl (EulerOS-SA-2019-2326)	3 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : perl (EulerOS-SA-2020-1421)	15 Apr 202000:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : perl (EulerOS-SA-2020-2380)	3 Nov 202000:00	–	nessus
Tenable Nessus	F5 Networks BIG-IP : Perl vulnerability (K000141301)	1 Oct 202400:00	–	nessus

Source	Link
rt	www.rt.perl.org/Public/Bug/Display.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

01 Feb 2023 04:07Current

5.4Medium risk

Vulners AI Score5.4

CVSS 27.5

CVSS 34 - 9.8

EPSS0.03896