Every CVE Search/ Get API key

CVE-2023-47100

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because...

9.8 CriticalFix availableRejected

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

What each source reports

GitHub Advisories Score usedGHSA-hx28-vm67-xh3r 9.8

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because...

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

Record
GHSA-hx28-vm67-xh3r
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-755
Updated
2026-11-02
CVE List No score

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Record
CVE-2023-47100
Updated
2026-11-02
EUVDEUVD-2023-51254 No score

DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Record
EUVD-2023-51254
Updated
2026-11-02
NVD No score

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Record
CVE-2023-47100
Updated
2026-11-02
OSVOESA-2023-1926 9.8

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)

Record
OESA-2023-1926
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1927 9.8

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)

Record
OESA-2023-1927
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1928 9.8

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development. Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.(CVE-2023-47100)

Record
OESA-2023-1928
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2023-1702495051 No score

perl: Fix of CVE-2023-47100

  • CVE-2023-47100: fix read/write past buffer end
Record
CLSA-2023-1702495051
Updated
2026-11-02
OSV No score

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-47038. Reason: This record is a duplicate of CVE-2023-47038. Notes: All CVE users should reference CVE-2023-47038 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.

Record
CVE-2023-47100
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
perl
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-Attribute-Handlers
TuxCare:AlmaLinux:9.2
before 1.01-480.el9.tuxcare.els2
1.01-480.el9.tuxcare.els2
perl-AutoLoader
TuxCare:AlmaLinux:9.2
before 5.74-480.el9.tuxcare.els2
5.74-480.el9.tuxcare.els2
perl-AutoSplit
TuxCare:AlmaLinux:9.2
before 5.74-480.el9.tuxcare.els2
5.74-480.el9.tuxcare.els2
perl-B
TuxCare:AlmaLinux:9.2
before 1.80-480.el9.tuxcare.els2
1.80-480.el9.tuxcare.els2
perl-Benchmark
TuxCare:AlmaLinux:9.2
before 1.23-480.el9.tuxcare.els2
1.23-480.el9.tuxcare.els2
perl-Class-Struct
TuxCare:AlmaLinux:9.2
before 0.66-480.el9.tuxcare.els2
0.66-480.el9.tuxcare.els2
perl-Config-Extensions
TuxCare:AlmaLinux:9.2
before 0.03-480.el9.tuxcare.els2
0.03-480.el9.tuxcare.els2
perl-DBM_Filter
TuxCare:AlmaLinux:9.2
before 0.06-480.el9.tuxcare.els2
0.06-480.el9.tuxcare.els2
perl-Devel-Peek
TuxCare:AlmaLinux:9.2
before 1.28-480.el9.tuxcare.els2
1.28-480.el9.tuxcare.els2
Show 94 moreShow less
Affected packages
PackageAffectedFixed
perl-Devel-SelfStubber
TuxCare:AlmaLinux:9.2
before 1.06-480.el9.tuxcare.els2
1.06-480.el9.tuxcare.els2
perl-DirHandle
TuxCare:AlmaLinux:9.2
before 1.05-480.el9.tuxcare.els2
1.05-480.el9.tuxcare.els2
perl-Dumpvalue
TuxCare:AlmaLinux:9.2
before 2.27-480.el9.tuxcare.els2
2.27-480.el9.tuxcare.els2
perl-DynaLoader
TuxCare:AlmaLinux:9.2
before 1.47-480.el9.tuxcare.els2
1.47-480.el9.tuxcare.els2
perl-English
TuxCare:AlmaLinux:9.2
before 1.11-480.el9.tuxcare.els2
1.11-480.el9.tuxcare.els2
perl-Errno
TuxCare:AlmaLinux:9.2
before 1.30-480.el9.tuxcare.els2
1.30-480.el9.tuxcare.els2
perl-ExtUtils-Constant
TuxCare:AlmaLinux:9.2
before 0.25-480.el9.tuxcare.els2
0.25-480.el9.tuxcare.els2
perl-ExtUtils-Embed
TuxCare:AlmaLinux:9.2
before 1.35-480.el9.tuxcare.els2
1.35-480.el9.tuxcare.els2
perl-ExtUtils-Miniperl
TuxCare:AlmaLinux:9.2
before 1.09-480.el9.tuxcare.els2
1.09-480.el9.tuxcare.els2
perl-Fcntl
TuxCare:AlmaLinux:9.2
before 1.13-480.el9.tuxcare.els2
1.13-480.el9.tuxcare.els2
perl-File-Basename
TuxCare:AlmaLinux:9.2
before 2.85-480.el9.tuxcare.els2
2.85-480.el9.tuxcare.els2
perl-File-Compare
TuxCare:AlmaLinux:9.2
before 1.100.600-480.el9.tuxcare.els2
1.100.600-480.el9.tuxcare.els2
perl-File-Copy
TuxCare:AlmaLinux:9.2
before 2.34-480.el9.tuxcare.els2
2.34-480.el9.tuxcare.els2
perl-File-DosGlob
TuxCare:AlmaLinux:9.2
before 1.12-480.el9.tuxcare.els2
1.12-480.el9.tuxcare.els2
perl-File-Find
TuxCare:AlmaLinux:9.2
before 1.37-480.el9.tuxcare.els2
1.37-480.el9.tuxcare.els2
perl-File-stat
TuxCare:AlmaLinux:9.2
before 1.09-480.el9.tuxcare.els2
1.09-480.el9.tuxcare.els2
perl-FileCache
TuxCare:AlmaLinux:9.2
before 1.10-480.el9.tuxcare.els2
1.10-480.el9.tuxcare.els2
perl-FileHandle
TuxCare:AlmaLinux:9.2
before 2.03-480.el9.tuxcare.els2
2.03-480.el9.tuxcare.els2
perl-FindBin
TuxCare:AlmaLinux:9.2
before 1.51-480.el9.tuxcare.els2
1.51-480.el9.tuxcare.els2
perl-GDBM_File
TuxCare:AlmaLinux:9.2
before 1.18-480.el9.tuxcare.els2
1.18-480.el9.tuxcare.els2
perl-Getopt-Std
TuxCare:AlmaLinux:9.2
before 1.12-480.el9.tuxcare.els2
1.12-480.el9.tuxcare.els2
perl-Hash-Util
TuxCare:AlmaLinux:9.2
before 0.23-480.el9.tuxcare.els2
0.23-480.el9.tuxcare.els2
perl-Hash-Util-FieldHash
TuxCare:AlmaLinux:9.2
before 1.20-480.el9.tuxcare.els2
1.20-480.el9.tuxcare.els2
perl-I18N-Collate
TuxCare:AlmaLinux:9.2
before 1.02-480.el9.tuxcare.els2
1.02-480.el9.tuxcare.els2
perl-I18N-LangTags
TuxCare:AlmaLinux:9.2
before 0.44-480.el9.tuxcare.els2
0.44-480.el9.tuxcare.els2
perl-I18N-Langinfo
TuxCare:AlmaLinux:9.2
before 0.19-480.el9.tuxcare.els2
0.19-480.el9.tuxcare.els2
perl-IO
TuxCare:AlmaLinux:9.2
before 1.43-480.el9.tuxcare.els2
1.43-480.el9.tuxcare.els2
perl-IPC-Open3
TuxCare:AlmaLinux:9.2
before 1.21-480.el9.tuxcare.els2
1.21-480.el9.tuxcare.els2
perl-Locale-Maketext-Simple
TuxCare:AlmaLinux:9.2
before 1:0.21-480.el9.tuxcare.els2
1:0.21-480.el9.tuxcare.els2
perl-Math-Complex
TuxCare:AlmaLinux:9.2
before 1.59-480.el9.tuxcare.els2
1.59-480.el9.tuxcare.els2
perl-Memoize
TuxCare:AlmaLinux:9.2
before 1.03-480.el9.tuxcare.els2
1.03-480.el9.tuxcare.els2
perl-Module-Loaded
TuxCare:AlmaLinux:9.2
before 1:0.08-480.el9.tuxcare.els2
1:0.08-480.el9.tuxcare.els2
perl-NDBM_File
TuxCare:AlmaLinux:9.2
before 1.15-480.el9.tuxcare.els2
1.15-480.el9.tuxcare.els2
perl-NEXT
TuxCare:AlmaLinux:9.2
before 0.67-480.el9.tuxcare.els2
0.67-480.el9.tuxcare.els2
perl-Net
TuxCare:AlmaLinux:9.2
before 1.02-480.el9.tuxcare.els2
1.02-480.el9.tuxcare.els2
perl-ODBM_File
TuxCare:AlmaLinux:9.2
before 1.16-480.el9.tuxcare.els2
1.16-480.el9.tuxcare.els2
perl-Opcode
TuxCare:AlmaLinux:9.2
before 1.48-480.el9.tuxcare.els2
1.48-480.el9.tuxcare.els2
perl-POSIX
TuxCare:AlmaLinux:9.2
before 1.94-480.el9.tuxcare.els2
1.94-480.el9.tuxcare.els2
perl-Pod-Functions
TuxCare:AlmaLinux:9.2
before 1.13-480.el9.tuxcare.els2
1.13-480.el9.tuxcare.els2
perl-Pod-Html
TuxCare:AlmaLinux:9.2
before 1.25-480.el9.tuxcare.els2
1.25-480.el9.tuxcare.els2
perl-Safe
TuxCare:AlmaLinux:9.2
before 2.41-480.el9.tuxcare.els2
2.41-480.el9.tuxcare.els2
perl-Search-Dict
TuxCare:AlmaLinux:9.2
before 1.07-480.el9.tuxcare.els2
1.07-480.el9.tuxcare.els2
perl-SelectSaver
TuxCare:AlmaLinux:9.2
before 1.02-480.el9.tuxcare.els2
1.02-480.el9.tuxcare.els2
perl-SelfLoader
TuxCare:AlmaLinux:9.2
before 1.26-480.el9.tuxcare.els2
1.26-480.el9.tuxcare.els2
perl-Symbol
TuxCare:AlmaLinux:9.2
before 1.08-480.el9.tuxcare.els2
1.08-480.el9.tuxcare.els2
perl-Sys-Hostname
TuxCare:AlmaLinux:9.2
before 1.23-480.el9.tuxcare.els2
1.23-480.el9.tuxcare.els2
perl-Term-Complete
TuxCare:AlmaLinux:9.2
before 1.403-480.el9.tuxcare.els2
1.403-480.el9.tuxcare.els2
perl-Term-ReadLine
TuxCare:AlmaLinux:9.2
before 1.17-480.el9.tuxcare.els2
1.17-480.el9.tuxcare.els2
perl-Test
TuxCare:AlmaLinux:9.2
before 1.31-480.el9.tuxcare.els2
1.31-480.el9.tuxcare.els2
perl-Text-Abbrev
TuxCare:AlmaLinux:9.2
before 1.02-480.el9.tuxcare.els2
1.02-480.el9.tuxcare.els2
perl-Thread
TuxCare:AlmaLinux:9.2
before 3.05-480.el9.tuxcare.els2
3.05-480.el9.tuxcare.els2
perl-Thread-Semaphore
TuxCare:AlmaLinux:9.2
before 2.13-480.el9.tuxcare.els2
2.13-480.el9.tuxcare.els2
perl-Tie
TuxCare:AlmaLinux:9.2
before 4.6-480.el9.tuxcare.els2
4.6-480.el9.tuxcare.els2
perl-Tie-File
TuxCare:AlmaLinux:9.2
before 1.06-480.el9.tuxcare.els2
1.06-480.el9.tuxcare.els2
perl-Tie-Memoize
TuxCare:AlmaLinux:9.2
before 1.1-480.el9.tuxcare.els2
1.1-480.el9.tuxcare.els2
perl-Time
TuxCare:AlmaLinux:9.2
before 1.03-480.el9.tuxcare.els2
1.03-480.el9.tuxcare.els2
perl-Time-Piece
TuxCare:AlmaLinux:9.2
before 1.3401-480.el9.tuxcare.els2
1.3401-480.el9.tuxcare.els2
perl-Unicode-UCD
TuxCare:AlmaLinux:9.2
before 0.75-480.el9.tuxcare.els2
0.75-480.el9.tuxcare.els2
perl-User-pwent
TuxCare:AlmaLinux:9.2
before 1.03-480.el9.tuxcare.els2
1.03-480.el9.tuxcare.els2
perl-autouse
TuxCare:AlmaLinux:9.2
before 1.11-480.el9.tuxcare.els2
1.11-480.el9.tuxcare.els2
perl-base
TuxCare:AlmaLinux:9.2
before 2.27-480.el9.tuxcare.els2
2.27-480.el9.tuxcare.els2
perl-blib
TuxCare:AlmaLinux:9.2
before 1.07-480.el9.tuxcare.els2
1.07-480.el9.tuxcare.els2
perl-debugger
TuxCare:AlmaLinux:9.2
before 1.56-480.el9.tuxcare.els2
1.56-480.el9.tuxcare.els2
perl-deprecate
TuxCare:AlmaLinux:9.2
before 0.04-480.el9.tuxcare.els2
0.04-480.el9.tuxcare.els2
perl-devel
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-diagnostics
TuxCare:AlmaLinux:9.2
before 1.37-480.el9.tuxcare.els2
1.37-480.el9.tuxcare.els2
perl-doc
TuxCare:AlmaLinux:9.2
before 5.32.1-480.el9.tuxcare.els2
5.32.1-480.el9.tuxcare.els2
perl-encoding-warnings
TuxCare:AlmaLinux:9.2
before 0.13-480.el9.tuxcare.els2
0.13-480.el9.tuxcare.els2
perl-fields
TuxCare:AlmaLinux:9.2
before 2.27-480.el9.tuxcare.els2
2.27-480.el9.tuxcare.els2
perl-filetest
TuxCare:AlmaLinux:9.2
before 1.03-480.el9.tuxcare.els2
1.03-480.el9.tuxcare.els2
perl-if
TuxCare:AlmaLinux:9.2
before 0.60.800-480.el9.tuxcare.els2
0.60.800-480.el9.tuxcare.els2
perl-interpreter
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-less
TuxCare:AlmaLinux:9.2
before 0.03-480.el9.tuxcare.els2
0.03-480.el9.tuxcare.els2
perl-lib
TuxCare:AlmaLinux:9.2
before 0.65-480.el9.tuxcare.els2
0.65-480.el9.tuxcare.els2
perl-libnetcfg
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-libs
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-locale
TuxCare:AlmaLinux:9.2
before 1.09-480.el9.tuxcare.els2
1.09-480.el9.tuxcare.els2
perl-macros
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-meta-notation
TuxCare:AlmaLinux:9.2
before 5.32.1-480.el9.tuxcare.els2
5.32.1-480.el9.tuxcare.els2
perl-mro
TuxCare:AlmaLinux:9.2
before 1.23-480.el9.tuxcare.els2
1.23-480.el9.tuxcare.els2
perl-open
TuxCare:AlmaLinux:9.2
before 1.12-480.el9.tuxcare.els2
1.12-480.el9.tuxcare.els2
perl-overload
TuxCare:AlmaLinux:9.2
before 1.31-480.el9.tuxcare.els2
1.31-480.el9.tuxcare.els2
perl-overloading
TuxCare:AlmaLinux:9.2
before 0.02-480.el9.tuxcare.els2
0.02-480.el9.tuxcare.els2
perl-ph
TuxCare:AlmaLinux:9.2
before 5.32.1-480.el9.tuxcare.els2
5.32.1-480.el9.tuxcare.els2
perl-sigtrap
TuxCare:AlmaLinux:9.2
before 1.09-480.el9.tuxcare.els2
1.09-480.el9.tuxcare.els2
perl-sort
TuxCare:AlmaLinux:9.2
before 2.04-480.el9.tuxcare.els2
2.04-480.el9.tuxcare.els2
perl-subs
TuxCare:AlmaLinux:9.2
before 1.03-480.el9.tuxcare.els2
1.03-480.el9.tuxcare.els2
perl-tests
TuxCare:AlmaLinux:9.2
before 4:5.32.1-480.el9.tuxcare.els2
4:5.32.1-480.el9.tuxcare.els2
perl-utils
TuxCare:AlmaLinux:9.2
before 5.32.1-480.el9.tuxcare.els2
5.32.1-480.el9.tuxcare.els2
perl-vars
TuxCare:AlmaLinux:9.2
before 1.05-480.el9.tuxcare.els2
1.05-480.el9.tuxcare.els2
perl-vmsish
TuxCare:AlmaLinux:9.2
before 1.04-480.el9.tuxcare.els2
1.04-480.el9.tuxcare.els2
perl
openEuler:22.03-LTS-SP2
before 5.34.0-13.oe2203sp2
5.34.0-13.oe2203sp2
perl
openEuler:22.03-LTS
before 5.34.0-12.oe2203
5.34.0-12.oe2203
perl
openEuler:22.03-LTS-SP1
before 5.34.0-12.oe2203sp1
5.34.0-12.oe2203sp1

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-47100 has been rejected by its source and should not be treated as a live vulnerability, published December 2, 2023. Fixed in perl 4:5.32.1-480.el9.tuxcare.els2.

References

MoveEnter Open