Internet Bug Bounty: [CVE-2018-18313] regcomp: heap-buffer-overflow read in S_grok_bslash_N

See: https://rt.perl.org/Public/Bug/Display.html?id=133192 CVE ID: CVE-2018-18313 Impact Potential information leakex: secret variables or source codes...

Perl heap overflow vulnerability (CNVD-2019-09594)

Perl is a high-level, general-purpose, interpreted, dynamic programming language. A heap overflow vulnerability exists in SgrokbslashN in 'regcomp.c' in Perl 5.26 during compilation, which can be exploited by a remote attacker to obtain sensitive information via a specially crafted regular...

CVE-2017-12883

Perl 5 vulnerable to CVE-2017-12883: a buffer overflow in S_grok_bslash_N in regcomp.c allows an attacker to disclose memory or cause a denial of service via a crafted regular expression containing an invalid '\N{U+...}' escape. Affected versions are Perl before 5.24.3-RC1 and 5.26.x before 5.26....

CVE-2017-12883

None...

CVE-2017-12883: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the SgrokbslashN function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service application crash via a crafted regular expression with an invalid '\NU+...' escape...