← Back

Perl

perl

67 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Perl
perl
Dbi
dbi
File\
file\
Cgi Lite
cgi_lite
Suidperl
suidperl
Convert Uulib
convert_uulib
Pcre
pcre
Pathtools
pathtools

CVEs (67)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Perl
1Dbi
Nov 21, 2024
Sep 11, 2020
N/A· v4
6.1 MEDIUM· v3
3.6 LOW· v2
An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute.
1Perl
1Dbi
Nov 21, 2024
Sep 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated.
2Canonical
Perl
2Dbi
Ubuntu Linux
Nov 21, 2024
Sep 11, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods for Callbacks may lead to memory corruption.
5Fedoraproject
NetappOpensuse+2 more
16Communications Billing And Revenue Management
Communications Diameter Signaling RouterCommunications Eagle Application Processor+13 more
Jun 17, 2026
Jun 5, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
5Fedoraproject
NetappOpensuse+2 more
17Communications Billing And Revenue Management
Communications Diameter Signaling RouterCommunications Eagle Application Processor+14 more
Jun 17, 2026
Jun 5, 2020
N/A· v4
8.6 HIGH· v3
7.5 HIGH· v2
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
4Fedoraproject
OpensuseOracle+1 more
15Communications Billing And Revenue Management
Communications Diameter Signaling RouterCommunications Eagle Application Processor+12 more
Jun 17, 2026
Jun 5, 2020
N/A· v4
8.2 HIGH· v3
6.4 MEDIUM· v2
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
5Canonical
DebianNetapp+2 more
8Debian Linux
E Series Santricity Os ControllerEnterprise Linux+5 more
Nov 21, 2024
Dec 7, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
6Apple
CanonicalDebian+3 more
9Debian Linux
E Series Santricity Os ControllerEnterprise Linux+6 more
Nov 21, 2024
Dec 7, 2018
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
8Apple
CanonicalDebian+5 more
18Debian Linux
E Series Santricity Os ControllerEnterprise Linux+15 more
Nov 21, 2024
Dec 7, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
5Canonical
DebianNetapp+2 more
8Debian Linux
E Series Santricity Os ControllerEnterprise Linux+5 more
Nov 21, 2024
Dec 5, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
6Apple
Archive\Canonical+3 more
9\
Data Ontap EdgeDebian Linux+6 more
Nov 21, 2024
Jun 7, 2018
N/A· v4
7.5 HIGH· v3
6.4 MEDIUM· v2
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file wit...Show more
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.Show less
3Canonical
DebianPerl
3Debian Linux
PerlUbuntu Linux
Jun 17, 2026
Apr 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.
4Canonical
DebianPerl+1 more
5Debian Linux
Enterprise Linux ServerEnterprise Linux Workstation+2 more
Jun 17, 2026
Apr 17, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.
4Canonical
DebianPerl+1 more
5Debian Linux
Enterprise Linux ServerEnterprise Linux Workstation+2 more
Jun 17, 2026
Apr 17, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
1Perl
1Perl
May 13, 2026
Sep 28, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.
1Perl
1Perl
May 13, 2026
Sep 19, 2017
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application cr...Show more
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.Show less
1Perl
1Perl
May 13, 2026
Sep 19, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expressi...Show more
Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.Show less
1Perl
1Perl
May 13, 2026
Feb 7, 2017
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argu...Show more
The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of service (out-of-bounds read) and possibly execute arbitrary code via a crafted (1) drive letter or (2) pInName argument.Show less
5Canonical
DebianFedoraproject+2 more
5Debian Linux
FedoraPerl+2 more
May 6, 2026
Aug 2, 2016
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working...Show more
The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.Show less
5Apache
DebianFedoraproject+2 more
5Debian Linux
FedoraLeap+2 more
May 6, 2026
Aug 2, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) c...Show more
(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan, (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7) cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9) cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11) cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails, (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15) dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist, (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL, (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23) utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period) characters from the end of the includes directory array, which might allow local users to gain privileges via a Trojan horse module under the current working directory.Show less