CVE-2018-6798

Published: Apr 17, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.

Affected (14)

Products: Debian: Debian Linux · Perl: Perl · Canonical: Ubuntu Linux · +1 more

Show all products

Debian: Debian Linux · Perl: Perl · Canonical: Ubuntu Linux · Redhat: Enterprise Linux Server, Enterprise Linux Workstation

1 product

1 product

1 product

2 products

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Perl Perl	From 5.22 to 5.26

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 17.10

Configuration D

7 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server	Version 6.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Server	Version 7.3
Redhat Enterprise Linux Server	Version 7.4
Redhat Enterprise Linux Server	Version 7.5
Redhat Enterprise Linux Workstation	Version 6.0
Redhat Enterprise Linux Workstation	Version 7.0