In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

...

UBUNTU-CVE-2025-40908

YAML-LibYAML prior to 0.903.0 for Perl uses 2-args open, allowing existing files to be modified...

OESA-2025-1471 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: A heap buffer overflow vulnerability was...

UBUNTU-CVE-2025-30673

Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory '.' to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code...

Perl 安全漏洞

Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the PERL community. A security vulnerability exists in Perl 0.007 and earlier versions that stems from the use of the rand function as the default entropy source for cryptographic functions that are not...

PT-2026-7944

Name of the Vulnerable Software and Affected Versions WWW::OAuth versions 1.000 and earlier Description The software utilizes the rand function as the default source of entropy for cryptographic functions, which is not cryptographically secure. This can potentially compromise the security of...

The vulnerability of the _execve50c() function in the POSIX.1-2008 standard library for the Perl language in version 2008 allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the execve50c function in the POSIX.1-2008 standard library for the Perl language in POSIX.2008 is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause...

postgresql: PostgreSQL PL/Perl environment variable changes execute arbitrary code

A flaw was found in PostgreSQL PL/Perl. This vulnerability allows an unprivileged database user to change sensitive process environment variables e.g., PATH via incorrect control of environment variables...

Number withdrawn

Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the PERL community...

The vulnerability of the Perl programming language, related to buffer overflows in dynamic memory, allows attackers to cause system failures or execute arbitrary code.

The vulnerability of the Perl programming language is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause system failures or execute arbitrary code...

The vulnerability of the Perl programming language lies in its uncontrolled search path element, which allows attackers to execute arbitrary code.

The vulnerability of the Perl programming language is related to an uncontrollable element in the search process. Exploiting this vulnerability allows an attacker to execute arbitrary code...

OESA-2023-1400 perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects. Security Fixes: HTTP::Tiny before 0.083, a Perl core...

SUSE CVE-2010-3433

The PL/perl and PL/Tcl implementations in PostgreSQL 7.4 before 7.4.30, 8.0 before 8.0.26, 8.1 before 8.1.22, 8.2 before 8.2.18, 8.3 before 8.3.12, 8.4 before 8.4.5, and 9.0 before 9.0.1 do not properly protect script execution by a different SQL user identity within the same session, which allow...

The vulnerability of the decode_xs function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the decodexs function in the Perl programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the telldir function in the Perl programming language allows a hacker to cause a service failure.

The vulnerability of the telldir function in the Perl programming language is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the bsd_glob function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the bsdglob function in the Perl programming language is related to resource release errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

UBUNTU-CVE-2013-7490

An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption...

The vulnerability in the implementation of the S_study_chunk function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the Sstudychunk function implementation in the Perl programming language is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

ALPINE-CVE-2020-10878

Perl before 5.30.3 has an integer overflow related to mishandling of a "PLregkindOPn == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection...

Perl Denial of Service Vulnerability (CNVD-2020-37943)

Perl is a general-purpose, interpreted, dynamic cross-platform programming language from the Perl community. A security vulnerability exists in Perl Core. An attacker can exploit this vulnerability to cause a denial of service and possibly execute code...