CVE-2010-1158

Published: Apr 20, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.

Affected (9)

Products: Perl: Perl

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Perl Perl	Version 5.8.1
Perl Perl	Version 5.8.2
Perl Perl	Version 5.8.3
Perl Perl	Version 5.8.4
Perl Perl	Version 5.8.5
Perl Perl	Version 5.8.6
Perl Perl	Version 5.8.7
Perl Perl	Version 5.8.8
Perl Perl	Version 5.8.9

Related CWEs

References (12)

http://bugs.gentoo.org/show_bug.cgi?id=313565

Source: secalert@redhat.com

Exploit

http://perldoc.perl.org/perl5100delta.html

Source: secalert@redhat.com

http://secunia.com/advisories/55314

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/04/08/9

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2010/04/14/3

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=580605

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=313565

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://perldoc.perl.org/perl5100delta.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/55314

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/04/08/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2010/04/14/3

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=580605

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.