CVE-2023-47038

Published: Dec 18, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.

Affected (6)

Products: Perl: Perl · Fedoraproject: Fedora · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Eus

1 product

1 product

3 products

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Perl Perl	From 5.30.0 to 5.38.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 39

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0
Redhat Enterprise Linux Aus	Version 9.4
Redhat Enterprise Linux Eus	Version 9.4

Related CWEs

CWE-122

Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (19)

https://access.redhat.com/errata/RHSA-2024:2228

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2024:3128

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/security/cve/CVE-2023-47038

Source: secalert@redhat.com

Broken LinkThird Party Advisory

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746

Source: secalert@redhat.com

Mailing ListPatch

https://bugzilla.redhat.com/show_bug.cgi?id=2249523

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

https://access.redhat.com/errata/RHSA-2024:2228