DeutschShown in its original language — a full translation is planned for a future version.
Perl: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit den Rechten des Dienstes
view advisory published 2020-06-07
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Perl ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen oder einen Denial of Service Angriff durchzuführen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-12723US | high7.5 | — | ||
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. | ||||
| CVE-2020-10878US | high8.6 | — | ||
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with… | ||||
| CVE-2020-10543US | high8.2 | — | ||
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow. | ||||
02
references
External citations — patches, advisories, analysis.
- CentOS Security Advisory CESA-2021:0343 vom 2021-02-04external
- Oracle Linux Security Advisory ELSA-2021-0343 vom 2021-02-03external
- SUSE Security Update SUSE-SU-2020:1682-2 vom 2020-07-07external
- SUSE Security Update SUSE-SU-2020:1662-1 vom 2020-06-18external
- SUSE Security Update SUSE-SU-2020:1682-1 vom 2020-06-19external
- Red Hat Security Advisory RHSA-2021:0343 vom 2021-02-02external
- Red Hat Security Advisory RHSA-2021:0557 vom 2021-02-16external
- Red Hat Security Advisory RHSA-2021:0883 vom 2021-03-16external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan