Vulnerability Details CVE-2018-6797
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.019
EPSS Ranking 82.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://www.securitytracker.com/id/1040681
- http://www.securitytracker.com/id/1042004
- https://access.redhat.com/errata/RHSA-2018:1192
- https://rt.perl.org/Public/Bug/Display.html?id=132227
- https://security.gentoo.org/glsa/201909-01
- https://usn.ubuntu.com/3625-1/
- https://www.debian.org/security/2018/dsa-4172
- https://www.oracle.com/security-alerts/cpujul2020.html
- http://www.securitytracker.com/id/1040681
- http://www.securitytracker.com/id/1042004
- https://access.redhat.com/errata/RHSA-2018:1192
- https://rt.perl.org/Public/Bug/Display.html?id=132227
- https://security.gentoo.org/glsa/201909-01
- https://usn.ubuntu.com/3625-1/
- https://www.debian.org/security/2018/dsa-4172
- https://www.oracle.com/security-alerts/cpujul2020.html
Products affected by CVE-2018-6797
-
cpe:2.3:a:perl:perl:5.18.0
-
cpe:2.3:a:perl:perl:5.18.1
-
cpe:2.3:a:perl:perl:5.18.2
-
cpe:2.3:a:perl:perl:5.18.3
-
cpe:2.3:a:perl:perl:5.18.4
-
cpe:2.3:a:perl:perl:5.19.0
-
cpe:2.3:a:perl:perl:5.19.1
-
cpe:2.3:a:perl:perl:5.19.10
-
cpe:2.3:a:perl:perl:5.19.11
-
cpe:2.3:a:perl:perl:5.19.2
-
cpe:2.3:a:perl:perl:5.19.3
-
cpe:2.3:a:perl:perl:5.19.4
-
cpe:2.3:a:perl:perl:5.19.5
-
cpe:2.3:a:perl:perl:5.19.6
-
cpe:2.3:a:perl:perl:5.19.7
-
cpe:2.3:a:perl:perl:5.19.8
-
cpe:2.3:a:perl:perl:5.19.9
-
cpe:2.3:a:perl:perl:5.20.0
-
cpe:2.3:a:perl:perl:5.20.1
-
cpe:2.3:a:perl:perl:5.20.2
-
cpe:2.3:a:perl:perl:5.20.3
-
cpe:2.3:a:perl:perl:5.21.0
-
cpe:2.3:a:perl:perl:5.21.1
-
cpe:2.3:a:perl:perl:5.21.10
-
cpe:2.3:a:perl:perl:5.21.11
-
cpe:2.3:a:perl:perl:5.21.2
-
cpe:2.3:a:perl:perl:5.21.3
-
cpe:2.3:a:perl:perl:5.21.4
-
cpe:2.3:a:perl:perl:5.21.5
-
cpe:2.3:a:perl:perl:5.21.6
-
cpe:2.3:a:perl:perl:5.21.7
-
cpe:2.3:a:perl:perl:5.21.8
-
cpe:2.3:a:perl:perl:5.21.9
-
cpe:2.3:a:perl:perl:5.22
-
cpe:2.3:a:perl:perl:5.22.0
-
cpe:2.3:a:perl:perl:5.22.1
-
cpe:2.3:a:perl:perl:5.22.2
-
cpe:2.3:a:perl:perl:5.22.3
-
cpe:2.3:a:perl:perl:5.22.4
-
cpe:2.3:a:perl:perl:5.23.0
-
cpe:2.3:a:perl:perl:5.23.1
-
cpe:2.3:a:perl:perl:5.23.2
-
cpe:2.3:a:perl:perl:5.23.3
-
cpe:2.3:a:perl:perl:5.23.4
-
cpe:2.3:a:perl:perl:5.23.5
-
cpe:2.3:a:perl:perl:5.23.6
-
cpe:2.3:a:perl:perl:5.23.7
-
cpe:2.3:a:perl:perl:5.23.8
-
cpe:2.3:a:perl:perl:5.23.9
-
cpe:2.3:a:perl:perl:5.24.0
-
cpe:2.3:a:perl:perl:5.24.1
-
cpe:2.3:a:perl:perl:5.24.2
-
cpe:2.3:a:perl:perl:5.24.3
-
cpe:2.3:a:perl:perl:5.24.4
-
cpe:2.3:a:perl:perl:5.25.0
-
cpe:2.3:a:perl:perl:5.25.1
-
cpe:2.3:a:perl:perl:5.25.10
-
cpe:2.3:a:perl:perl:5.25.11
-
cpe:2.3:a:perl:perl:5.25.12
-
cpe:2.3:a:perl:perl:5.25.2
-
cpe:2.3:a:perl:perl:5.25.3
-
cpe:2.3:a:perl:perl:5.25.4
-
cpe:2.3:a:perl:perl:5.25.5
-
cpe:2.3:a:perl:perl:5.25.6
-
cpe:2.3:a:perl:perl:5.25.7
-
cpe:2.3:a:perl:perl:5.25.8
-
cpe:2.3:a:perl:perl:5.25.9
-
cpe:2.3:o:canonical:ubuntu_linux:16.04
-
cpe:2.3:o:canonical:ubuntu_linux:17.10
-
cpe:2.3:o:debian:debian_linux:8.0
-
cpe:2.3:o:debian:debian_linux:9.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.0
-
cpe:2.3:o:redhat:enterprise_linux_server:7.3
-
cpe:2.3:o:redhat:enterprise_linux_server:7.4
-
cpe:2.3:o:redhat:enterprise_linux_server:7.5
-
cpe:2.3:o:redhat:enterprise_linux_server:7.6
-
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0
-
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0