PT-2018-2510 · Perl+5 · Perl+5
Publicado
2018-05-15
·
Atualizado
2024-06-15
·
CVE-2018-18311
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Perl versions prior to 5.26.3
Perl versions 5.28.x prior to 5.28.1
Description
The issue is related to errors in handling regular expressions, leading to buffer overflow due to unchecked input data size, resulting in integer overflow. This can allow a remote attacker to cause a denial of service or execute arbitrary code.
Recommendations
For Perl versions prior to 5.26.3, update to version 5.26.3 or later.
For Perl versions 5.28.x prior to 5.28.1, update to version 5.28.1 or later.
As a temporary workaround, consider restricting the use of crafted regular expressions that may trigger the buffer overflow until a patch is available.
Correção
Integer Overflow
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Perl
Red Hat
Suse
Ubuntu