CVE-2023-47100
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because...
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
GitHub Advisories Score usedGHSA-hx28-vm67-xh3r
9.8
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because...
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.
- Record
GHSA-hx28-vm67-xh3r- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-755
- Updated
- 2026-11-02
CVE List No score
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
- Record
CVE-2023-47100- Updated
- 2026-11-02
EUVDEUVD-2023-51254 No score
DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
- Record
EUVD-2023-51254- Updated
- 2026-11-02
NVD No score
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
- Record
CVE-2023-47100- Updated
- 2026-11-02
OSVOESA-2023-1926
9.8
perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.
Security Fix(es):
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)
- Record
OESA-2023-1926- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1927
9.8
perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.
Security Fix(es):
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)
- Record
OESA-2023-1927- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2023-1928
9.8
perl security update
Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.
Security Fix(es):
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)
- Record
OESA-2023-1928- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2023-1702495051 No score
perl: Fix of CVE-2023-47100
- CVE-2023-47100: fix read/write past buffer end
- Record
CLSA-2023-1702495051- Updated
- 2026-11-02
OSV No score
Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
- Record
CVE-2023-47100- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
perlTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-Attribute-HandlersTuxCare:AlmaLinux:9.2 |
before 1.01-480.el9.tuxcare.els2 | 1.01-480.el9.tuxcare.els2 |
perl-AutoLoaderTuxCare:AlmaLinux:9.2 |
before 5.74-480.el9.tuxcare.els2 | 5.74-480.el9.tuxcare.els2 |
perl-AutoSplitTuxCare:AlmaLinux:9.2 |
before 5.74-480.el9.tuxcare.els2 | 5.74-480.el9.tuxcare.els2 |
perl-BTuxCare:AlmaLinux:9.2 |
before 1.80-480.el9.tuxcare.els2 | 1.80-480.el9.tuxcare.els2 |
perl-BenchmarkTuxCare:AlmaLinux:9.2 |
before 1.23-480.el9.tuxcare.els2 | 1.23-480.el9.tuxcare.els2 |
perl-Class-StructTuxCare:AlmaLinux:9.2 |
before 0.66-480.el9.tuxcare.els2 | 0.66-480.el9.tuxcare.els2 |
perl-Config-ExtensionsTuxCare:AlmaLinux:9.2 |
before 0.03-480.el9.tuxcare.els2 | 0.03-480.el9.tuxcare.els2 |
perl-DBM_FilterTuxCare:AlmaLinux:9.2 |
before 0.06-480.el9.tuxcare.els2 | 0.06-480.el9.tuxcare.els2 |
perl-Devel-PeekTuxCare:AlmaLinux:9.2 |
before 1.28-480.el9.tuxcare.els2 | 1.28-480.el9.tuxcare.els2 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
perl-Devel-SelfStubberTuxCare:AlmaLinux:9.2 |
before 1.06-480.el9.tuxcare.els2 | 1.06-480.el9.tuxcare.els2 |
perl-DirHandleTuxCare:AlmaLinux:9.2 |
before 1.05-480.el9.tuxcare.els2 | 1.05-480.el9.tuxcare.els2 |
perl-DumpvalueTuxCare:AlmaLinux:9.2 |
before 2.27-480.el9.tuxcare.els2 | 2.27-480.el9.tuxcare.els2 |
perl-DynaLoaderTuxCare:AlmaLinux:9.2 |
before 1.47-480.el9.tuxcare.els2 | 1.47-480.el9.tuxcare.els2 |
perl-EnglishTuxCare:AlmaLinux:9.2 |
before 1.11-480.el9.tuxcare.els2 | 1.11-480.el9.tuxcare.els2 |
perl-ErrnoTuxCare:AlmaLinux:9.2 |
before 1.30-480.el9.tuxcare.els2 | 1.30-480.el9.tuxcare.els2 |
perl-ExtUtils-ConstantTuxCare:AlmaLinux:9.2 |
before 0.25-480.el9.tuxcare.els2 | 0.25-480.el9.tuxcare.els2 |
perl-ExtUtils-EmbedTuxCare:AlmaLinux:9.2 |
before 1.35-480.el9.tuxcare.els2 | 1.35-480.el9.tuxcare.els2 |
perl-ExtUtils-MiniperlTuxCare:AlmaLinux:9.2 |
before 1.09-480.el9.tuxcare.els2 | 1.09-480.el9.tuxcare.els2 |
perl-FcntlTuxCare:AlmaLinux:9.2 |
before 1.13-480.el9.tuxcare.els2 | 1.13-480.el9.tuxcare.els2 |
perl-File-BasenameTuxCare:AlmaLinux:9.2 |
before 2.85-480.el9.tuxcare.els2 | 2.85-480.el9.tuxcare.els2 |
perl-File-CompareTuxCare:AlmaLinux:9.2 |
before 1.100.600-480.el9.tuxcare.els2 | 1.100.600-480.el9.tuxcare.els2 |
perl-File-CopyTuxCare:AlmaLinux:9.2 |
before 2.34-480.el9.tuxcare.els2 | 2.34-480.el9.tuxcare.els2 |
perl-File-DosGlobTuxCare:AlmaLinux:9.2 |
before 1.12-480.el9.tuxcare.els2 | 1.12-480.el9.tuxcare.els2 |
perl-File-FindTuxCare:AlmaLinux:9.2 |
before 1.37-480.el9.tuxcare.els2 | 1.37-480.el9.tuxcare.els2 |
perl-File-statTuxCare:AlmaLinux:9.2 |
before 1.09-480.el9.tuxcare.els2 | 1.09-480.el9.tuxcare.els2 |
perl-FileCacheTuxCare:AlmaLinux:9.2 |
before 1.10-480.el9.tuxcare.els2 | 1.10-480.el9.tuxcare.els2 |
perl-FileHandleTuxCare:AlmaLinux:9.2 |
before 2.03-480.el9.tuxcare.els2 | 2.03-480.el9.tuxcare.els2 |
perl-FindBinTuxCare:AlmaLinux:9.2 |
before 1.51-480.el9.tuxcare.els2 | 1.51-480.el9.tuxcare.els2 |
perl-GDBM_FileTuxCare:AlmaLinux:9.2 |
before 1.18-480.el9.tuxcare.els2 | 1.18-480.el9.tuxcare.els2 |
perl-Getopt-StdTuxCare:AlmaLinux:9.2 |
before 1.12-480.el9.tuxcare.els2 | 1.12-480.el9.tuxcare.els2 |
perl-Hash-UtilTuxCare:AlmaLinux:9.2 |
before 0.23-480.el9.tuxcare.els2 | 0.23-480.el9.tuxcare.els2 |
perl-Hash-Util-FieldHashTuxCare:AlmaLinux:9.2 |
before 1.20-480.el9.tuxcare.els2 | 1.20-480.el9.tuxcare.els2 |
perl-I18N-CollateTuxCare:AlmaLinux:9.2 |
before 1.02-480.el9.tuxcare.els2 | 1.02-480.el9.tuxcare.els2 |
perl-I18N-LangTagsTuxCare:AlmaLinux:9.2 |
before 0.44-480.el9.tuxcare.els2 | 0.44-480.el9.tuxcare.els2 |
perl-I18N-LanginfoTuxCare:AlmaLinux:9.2 |
before 0.19-480.el9.tuxcare.els2 | 0.19-480.el9.tuxcare.els2 |
perl-IOTuxCare:AlmaLinux:9.2 |
before 1.43-480.el9.tuxcare.els2 | 1.43-480.el9.tuxcare.els2 |
perl-IPC-Open3TuxCare:AlmaLinux:9.2 |
before 1.21-480.el9.tuxcare.els2 | 1.21-480.el9.tuxcare.els2 |
perl-Locale-Maketext-SimpleTuxCare:AlmaLinux:9.2 |
before 1:0.21-480.el9.tuxcare.els2 | 1:0.21-480.el9.tuxcare.els2 |
perl-Math-ComplexTuxCare:AlmaLinux:9.2 |
before 1.59-480.el9.tuxcare.els2 | 1.59-480.el9.tuxcare.els2 |
perl-MemoizeTuxCare:AlmaLinux:9.2 |
before 1.03-480.el9.tuxcare.els2 | 1.03-480.el9.tuxcare.els2 |
perl-Module-LoadedTuxCare:AlmaLinux:9.2 |
before 1:0.08-480.el9.tuxcare.els2 | 1:0.08-480.el9.tuxcare.els2 |
perl-NDBM_FileTuxCare:AlmaLinux:9.2 |
before 1.15-480.el9.tuxcare.els2 | 1.15-480.el9.tuxcare.els2 |
perl-NEXTTuxCare:AlmaLinux:9.2 |
before 0.67-480.el9.tuxcare.els2 | 0.67-480.el9.tuxcare.els2 |
perl-NetTuxCare:AlmaLinux:9.2 |
before 1.02-480.el9.tuxcare.els2 | 1.02-480.el9.tuxcare.els2 |
perl-ODBM_FileTuxCare:AlmaLinux:9.2 |
before 1.16-480.el9.tuxcare.els2 | 1.16-480.el9.tuxcare.els2 |
perl-OpcodeTuxCare:AlmaLinux:9.2 |
before 1.48-480.el9.tuxcare.els2 | 1.48-480.el9.tuxcare.els2 |
perl-POSIXTuxCare:AlmaLinux:9.2 |
before 1.94-480.el9.tuxcare.els2 | 1.94-480.el9.tuxcare.els2 |
perl-Pod-FunctionsTuxCare:AlmaLinux:9.2 |
before 1.13-480.el9.tuxcare.els2 | 1.13-480.el9.tuxcare.els2 |
perl-Pod-HtmlTuxCare:AlmaLinux:9.2 |
before 1.25-480.el9.tuxcare.els2 | 1.25-480.el9.tuxcare.els2 |
perl-SafeTuxCare:AlmaLinux:9.2 |
before 2.41-480.el9.tuxcare.els2 | 2.41-480.el9.tuxcare.els2 |
perl-Search-DictTuxCare:AlmaLinux:9.2 |
before 1.07-480.el9.tuxcare.els2 | 1.07-480.el9.tuxcare.els2 |
perl-SelectSaverTuxCare:AlmaLinux:9.2 |
before 1.02-480.el9.tuxcare.els2 | 1.02-480.el9.tuxcare.els2 |
perl-SelfLoaderTuxCare:AlmaLinux:9.2 |
before 1.26-480.el9.tuxcare.els2 | 1.26-480.el9.tuxcare.els2 |
perl-SymbolTuxCare:AlmaLinux:9.2 |
before 1.08-480.el9.tuxcare.els2 | 1.08-480.el9.tuxcare.els2 |
perl-Sys-HostnameTuxCare:AlmaLinux:9.2 |
before 1.23-480.el9.tuxcare.els2 | 1.23-480.el9.tuxcare.els2 |
perl-Term-CompleteTuxCare:AlmaLinux:9.2 |
before 1.403-480.el9.tuxcare.els2 | 1.403-480.el9.tuxcare.els2 |
perl-Term-ReadLineTuxCare:AlmaLinux:9.2 |
before 1.17-480.el9.tuxcare.els2 | 1.17-480.el9.tuxcare.els2 |
perl-TestTuxCare:AlmaLinux:9.2 |
before 1.31-480.el9.tuxcare.els2 | 1.31-480.el9.tuxcare.els2 |
perl-Text-AbbrevTuxCare:AlmaLinux:9.2 |
before 1.02-480.el9.tuxcare.els2 | 1.02-480.el9.tuxcare.els2 |
perl-ThreadTuxCare:AlmaLinux:9.2 |
before 3.05-480.el9.tuxcare.els2 | 3.05-480.el9.tuxcare.els2 |
perl-Thread-SemaphoreTuxCare:AlmaLinux:9.2 |
before 2.13-480.el9.tuxcare.els2 | 2.13-480.el9.tuxcare.els2 |
perl-TieTuxCare:AlmaLinux:9.2 |
before 4.6-480.el9.tuxcare.els2 | 4.6-480.el9.tuxcare.els2 |
perl-Tie-FileTuxCare:AlmaLinux:9.2 |
before 1.06-480.el9.tuxcare.els2 | 1.06-480.el9.tuxcare.els2 |
perl-Tie-MemoizeTuxCare:AlmaLinux:9.2 |
before 1.1-480.el9.tuxcare.els2 | 1.1-480.el9.tuxcare.els2 |
perl-TimeTuxCare:AlmaLinux:9.2 |
before 1.03-480.el9.tuxcare.els2 | 1.03-480.el9.tuxcare.els2 |
perl-Time-PieceTuxCare:AlmaLinux:9.2 |
before 1.3401-480.el9.tuxcare.els2 | 1.3401-480.el9.tuxcare.els2 |
perl-Unicode-UCDTuxCare:AlmaLinux:9.2 |
before 0.75-480.el9.tuxcare.els2 | 0.75-480.el9.tuxcare.els2 |
perl-User-pwentTuxCare:AlmaLinux:9.2 |
before 1.03-480.el9.tuxcare.els2 | 1.03-480.el9.tuxcare.els2 |
perl-autouseTuxCare:AlmaLinux:9.2 |
before 1.11-480.el9.tuxcare.els2 | 1.11-480.el9.tuxcare.els2 |
perl-baseTuxCare:AlmaLinux:9.2 |
before 2.27-480.el9.tuxcare.els2 | 2.27-480.el9.tuxcare.els2 |
perl-blibTuxCare:AlmaLinux:9.2 |
before 1.07-480.el9.tuxcare.els2 | 1.07-480.el9.tuxcare.els2 |
perl-debuggerTuxCare:AlmaLinux:9.2 |
before 1.56-480.el9.tuxcare.els2 | 1.56-480.el9.tuxcare.els2 |
perl-deprecateTuxCare:AlmaLinux:9.2 |
before 0.04-480.el9.tuxcare.els2 | 0.04-480.el9.tuxcare.els2 |
perl-develTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-diagnosticsTuxCare:AlmaLinux:9.2 |
before 1.37-480.el9.tuxcare.els2 | 1.37-480.el9.tuxcare.els2 |
perl-docTuxCare:AlmaLinux:9.2 |
before 5.32.1-480.el9.tuxcare.els2 | 5.32.1-480.el9.tuxcare.els2 |
perl-encoding-warningsTuxCare:AlmaLinux:9.2 |
before 0.13-480.el9.tuxcare.els2 | 0.13-480.el9.tuxcare.els2 |
perl-fieldsTuxCare:AlmaLinux:9.2 |
before 2.27-480.el9.tuxcare.els2 | 2.27-480.el9.tuxcare.els2 |
perl-filetestTuxCare:AlmaLinux:9.2 |
before 1.03-480.el9.tuxcare.els2 | 1.03-480.el9.tuxcare.els2 |
perl-ifTuxCare:AlmaLinux:9.2 |
before 0.60.800-480.el9.tuxcare.els2 | 0.60.800-480.el9.tuxcare.els2 |
perl-interpreterTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-lessTuxCare:AlmaLinux:9.2 |
before 0.03-480.el9.tuxcare.els2 | 0.03-480.el9.tuxcare.els2 |
perl-libTuxCare:AlmaLinux:9.2 |
before 0.65-480.el9.tuxcare.els2 | 0.65-480.el9.tuxcare.els2 |
perl-libnetcfgTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-libsTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-localeTuxCare:AlmaLinux:9.2 |
before 1.09-480.el9.tuxcare.els2 | 1.09-480.el9.tuxcare.els2 |
perl-macrosTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-meta-notationTuxCare:AlmaLinux:9.2 |
before 5.32.1-480.el9.tuxcare.els2 | 5.32.1-480.el9.tuxcare.els2 |
perl-mroTuxCare:AlmaLinux:9.2 |
before 1.23-480.el9.tuxcare.els2 | 1.23-480.el9.tuxcare.els2 |
perl-openTuxCare:AlmaLinux:9.2 |
before 1.12-480.el9.tuxcare.els2 | 1.12-480.el9.tuxcare.els2 |
perl-overloadTuxCare:AlmaLinux:9.2 |
before 1.31-480.el9.tuxcare.els2 | 1.31-480.el9.tuxcare.els2 |
perl-overloadingTuxCare:AlmaLinux:9.2 |
before 0.02-480.el9.tuxcare.els2 | 0.02-480.el9.tuxcare.els2 |
perl-phTuxCare:AlmaLinux:9.2 |
before 5.32.1-480.el9.tuxcare.els2 | 5.32.1-480.el9.tuxcare.els2 |
perl-sigtrapTuxCare:AlmaLinux:9.2 |
before 1.09-480.el9.tuxcare.els2 | 1.09-480.el9.tuxcare.els2 |
perl-sortTuxCare:AlmaLinux:9.2 |
before 2.04-480.el9.tuxcare.els2 | 2.04-480.el9.tuxcare.els2 |
perl-subsTuxCare:AlmaLinux:9.2 |
before 1.03-480.el9.tuxcare.els2 | 1.03-480.el9.tuxcare.els2 |
perl-testsTuxCare:AlmaLinux:9.2 |
before 4:5.32.1-480.el9.tuxcare.els2 | 4:5.32.1-480.el9.tuxcare.els2 |
perl-utilsTuxCare:AlmaLinux:9.2 |
before 5.32.1-480.el9.tuxcare.els2 | 5.32.1-480.el9.tuxcare.els2 |
perl-varsTuxCare:AlmaLinux:9.2 |
before 1.05-480.el9.tuxcare.els2 | 1.05-480.el9.tuxcare.els2 |
perl-vmsishTuxCare:AlmaLinux:9.2 |
before 1.04-480.el9.tuxcare.els2 | 1.04-480.el9.tuxcare.els2 |
perlopenEuler:22.03-LTS-SP2 |
before 5.34.0-13.oe2203sp2 | 5.34.0-13.oe2203sp2 |
perlopenEuler:22.03-LTS |
before 5.34.0-12.oe2203 | 5.34.0-12.oe2203 |
perlopenEuler:22.03-LTS-SP1 |
before 5.34.0-12.oe2203sp1 | 5.34.0-12.oe2203sp1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-47100 has been rejected by its source and should not be treated as a live vulnerability, published December 2, 2023. Fixed in perl 4:5.32.1-480.el9.tuxcare.els2.
References
nvd.nist.gov/vuln/detail/CVE-2023-47100
github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3
github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010
github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6
github.com/advisories/GHSA-hx28-vm67-xh3r
errata.tuxcare.com/almalinux9.2-esu/CLSA-2023-1702495051.html
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1926
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1927
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1928