WID-SEC-W-2024-1102

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Perl: Mehrere Schwachstellen

view advisory published 2018-04-15

Ein lokaler Angreifer kann mehrere Schwachstellen in Perl ausnutzen um einen Denial of Service Angriff durchzuführen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2018-6913UScritical9.8—
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.
CVE-2018-6798UShigh7.5—
An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclo…
CVE-2018-6797UScritical9.8—
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan