Lucene search
+L

57 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2025/12/16 10:38 a.m.7 views

Security Bulletin: Vulnerability in Perl affects IBM Netezza Appliance

Summary The Perl package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2020-10543, CVE-2020-10878, CVE-2020-12723, CVE-2025-40909 Vulnerability Details CVEID:CVE-2020-10543 DESCRIPTION: Perl before 5.30.3 on 32-bit platforms allows a heap-based buff...

8.6CVSS7AI score0.11334EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:0 a.m.7 views

TencentOS Server 3: perl (TSSA-2022:0171)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0171 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

8.6CVSS7.5AI score0.11334EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2020-12723

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls. CVE-2020-12723 Note that Nessu...

7.5CVSS7.5AI score0.05971EPSS
Exploits0References2
F5 Networks
F5 Networks
added 2025/02/05 8:2 a.m.21 views

K000149640: Multiple Perl vulnerabilities

Security Advisory Description CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure default TLS configuration where users must opt in to verify certificates. CVE-2020-12723 regcomp.c in Perl before 5.30.3 allows a buffer overflow...

8.2CVSS6.8AI score0.11334EPSS
Exploits4
IBM Security Bulletins
IBM Security Bulletins
added 2024/09/18 4:58 p.m.27 views

Security Bulletin: Vulnerability in Perl affects IBM watsonx.data

Summary For CVE-2020-10878, if a user submits a specially-crafted regular expression and it is used in a regex by watsonx.data, this may cause an instruction injection. Currently, IBM watsonx.data is not vulnerable to the vulnerabilities described in CVE-2020-10543, CVE-2020-12723 and...

8.6CVSS8.5AI score0.12608EPSS
Exploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/29 7:16 p.m.36 views

Security Bulletin: IBM Cloud Pak for Data is vulnerable to buffer overflow due to perl (CVE-2020-12723, CVE-2020-10543, CVE-2020-10878)

Summary Perl is used by IBM Cloud Pak for Data to build various binaries. CVE-2020-12723, CVE-2020-10543, CVE-2020-10878 Vulnerability Details CVEID:CVE-2020-12723 DESCRIPTION: Perl is vulnerable to a denial of service, caused by a buffer overflow in regcomp.c. By using a specially crafted regula...

8.6CVSS8.8AI score0.11334EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.10 views

RHEL 8 : perl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - perl: corruption of intermediate language state of compiled regular expression due to integer overflow...

8.6CVSS9AI score0.11334EPSS
Exploits1References4
OSV
OSV
added 2023/08/31 12:15 p.m.0 views

BELL-CVE-2020-12723 CVE-2020-12723 does not affect BellSoft software

Bulletin has no description...

7.5CVSS5.8AI score0.05971EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:58 a.m.3 views

SUSE CVE-2020-12723

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive Sstudychunk calls...

6.4CVSS9.4AI score0.05971EPSS
Exploits0References64
IBM Security Bulletins
IBM Security Bulletins
added 2023/01/12 9:59 p.m.42 views

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in Perl (CVE-2020-12723).

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a buffer overflow in Perl, caused by recursive Sstudychunk calls in regcomp.c CVE-2020-12723. This could allow a remote attacker to overflow a buffer and execute arbitrary code on the system. Perl is included...

7.5CVSS8.5AI score0.05971EPSS
Exploits0Affected Software1
OpenVAS
OpenVAS
added 2022/08/26 12:0 a.m.36 views

Ubuntu: Security Advisory (USN-4602-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.4AI score0.11334EPSS
Exploits0References2
CloudLinux
CloudLinux
added 2022/07/11 5:36 p.m.108 views

Fixed CVE-2020-12723 in perl-5.10.1

CVE-2020-12723: fix a buffer overflow caused by a crafted regular expression because of recursive Sstudychunk calls...

7.5CVSS4.8AI score0.05971EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.30 views

Mageia: Security Advisory (MGASA-2020-0255)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.3AI score0.11334EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/07/07 12:0 a.m.27 views

Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2021-2157)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.3AI score0.11334EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.21 views

SUSE: Security Advisory (SUSE-SU-2020:1682-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.2AI score0.11334EPSS
Exploits0References2
Oracle linux
Oracle linux
added 2021/05/25 12:0 a.m.90 views

perl security and bug fix update

4:5.26.3-419 - Fix CVE-2020-10543 bug 1839273 - Fix CVE-2020-10878 bug 1839276 - Fix a file mode of a perl-example.stp example bug 1913693 4:5.26.3-418 - Fix CVE-2020-12723 bug 1839279...

8.6CVSS1.4AI score0.11334EPSS
Exploits0
Oracle linux
Oracle linux
added 2021/05/20 12:0 a.m.179 views

perl security update

4:5.10.1-144.0.1 - Backport patch for CVE-2020-10543 Orabug: 32855589 - Backport patch for CVE-2020-10878 Orabug: 32855589 - Backport patch for CVE-2020-12723 Orabug: 32855589...

8.6CVSS1.6AI score0.11334EPSS
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2021/05/13 9:45 p.m.60 views

Security Bulletin: Cloud Pak for Security contains security vulnerabilities

Summary Cloud Pak for Security v 1.6.0.1 and earlier contains security vulnerabilities, addressed in Cloud Pak for Security v 1.7.0.0 Vulnerability Details CVEID: CVE-2020-10543 DESCRIPTION: Perl is vulnerable to a heap-based buffer overflow, caused by an integer overflow in the nested regular...

9.8CVSS9.7AI score0.77385EPSS
Exploits13Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/21 12:0 a.m.52 views

RHEL 7 : perl (RHSA-2021:1032)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1032 advisory. Perl is a high-level programming language that is commonly used for system administration utilities and web programming. Security Fixes: per...

8.6CVSS7AI score0.11334EPSS
Exploits0References10
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2020:1662-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS7.5AI score0.11334EPSS
Exploits0References9
Rows per page
Query Builder