CVE-2018-6797

An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written...

CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

CVE-2018-6797

An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written...

CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure...

CVE-2018-6797

CVE-2018-6797 affects Perl 5.18–5.26. A crafted regular expression can trigger a heap-based buffer overflow, with control over written bytes. Public references in the provided documents confirm this vulnerability in Perl and note fixes/updates across distributions (e.g., Fedora perl-5.26.x/CF pat...

CVE-2018-6913

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count...

Facebook Graph Metadata Crosswalk Mapping Proof Of Concept

!/usr/bin/perl Facebook 'Graph' metadata crosswalk mapping PoC 2018 Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Description: Criminal hacker CRACKER can take advantage of this weakness by creating a specialized database to manipulate facebook users with fake news...

Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3625-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3625-1 advisory. It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang,...

Ubuntu: Security Advisory (USN-3625-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-3625-1 perl vulnerabilities

It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2015-8853 It was discovered that Perl incorrectly loaded libraries from th...

USN-3625-1: Perl vulnerabilities

It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. CVE-2015-8853 It was discovered that Perl incorrectly loaded libraries from th...

Perl 'pack' function heap buffer overflow vulnerability

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A heap buffer overflow vulnerability exists in the 'pack' function in Perl versions prior to 5.26.2. A local attacker can exploit this vulnerability to execute arbitrary code...

Perl is vulnerable to sensitive information leakage

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A security vulnerability exists in Perl versions 5.22 through 5.26. The vulnerability can be exploited to obtain information heap-based buffer out-of-bounds reads with the help of speciall...

FreeBSD : perl -- multiple vulnerabilities (41c96ffd-29a6-4dcc-9a88-65f5038fa6eb)

perldelta : CVE-2018-6797: heap-buffer-overflow WRITE of size 1 in Sregatom regcomp.c A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. perl 132227 CVE-2018-6798: Heap-buffer-overflow in Perlbytedumpstring utf8.c Matching a crafted locale...

Debian DSA-4172-1 : perl - security update

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2018-6797 Brian Carpenter reported that a crafted regular expression could cause a heap buffer write overflow...

Perl has a denial of service vulnerability (CNVD-2018-08765)

Perl is a free and powerful cross-platform programming language developed by American programmer Larry Wall. A heap-based buffer overflow vulnerability exists in Perl versions 5.18 through 5.26, which is caused by the program failing to properly perform boundary detection. A local attacker can us...

Debian DLA-1345-1 : perl security update

GwanYeong Kim reported that 'pack' could cause a heap buffer write overflow with a large item count. For Debian 7 'Wheezy', these problems have been fixed in version 5.14.2-21+deb7u6. We recommend that you upgrade your perl packages. NOTE: Tenable Network Security has extracted the preceding...

DLA-1345-1 perl - security update

Bulletin has no description...

Debian: Security Advisory (DLA-1345-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...