Every CVE Search/ Get API key

CVE-2022-48522

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to...

9.8 CriticalFix available

CVE-2022-48522 is a critical vulnerability (CVSS 9.8) in Perl, published August 22, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.46%, the 89th percentile. Fixed in perl 5.36.0-4.

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

3.46%Up 3.4 points since Aug 23, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
CVE-2022-48522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
CVE-2022-48522
Updated
2026-11-02
EUVDEUVD-2022-51218 No score

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
EUVD-2022-51218
Updated
2026-11-02
GitHub AdvisoriesGHSA-96cv-gp7m-9r39 9.8

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to...

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
GHSA-96cv-gp7m-9r39
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVDEBIAN-CVE-2022-48522 9.8

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
DEBIAN-CVE-2022-48522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2023-1563 8.1

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.(CVE-2022-48522)

Record
OESA-2023-1563
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 6 moreShow less
OSVOESA-2023-1564 8.1

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.(CVE-2022-48522)

Record
OESA-2023-1564
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1565 8.1

perl security update

Perl 5 is a highly capable, feature-rich programming language with over 30 years of development.Perl 5 runs on over 100 platforms from portables to mainframes and is suitable for both rapid prototyping and large scale development projects.

Security Fix(es):

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.(CVE-2022-48522)

Record
OESA-2023-1565
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:6206 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:6206
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-48522 9.8

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
UBUNTU-CVE-2022-48522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV No score

In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.

Record
CVE-2022-48522
Updated
2026-11-02
OSVUSN-6517-1 No score

perl vulnerabilities

It was discovered that Perl incorrectly handled printing certain warning messages. An attacker could possibly use this issue to cause Perl to consume resources, leading to a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-48522)

Nathan Mills discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-47038)

Record
USN-6517-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
perl
Debian:12
 before 5.36.0-4
5.36.0-4
perl
Debian:13
 before 5.36.0-4
5.36.0-4
perl
Debian:14
 before 5.36.0-4
5.36.0-4
perl
openEuler:22.03-LTS
 before 5.34.0-9.oe2203
5.34.0-9.oe2203
perl
openEuler:22.03-LTS-SP1
 before 5.34.0-9.oe2203sp1
5.34.0-9.oe2203sp1
perl
openEuler:22.03-LTS-SP2
 before 5.34.0-9.oe2203sp2
5.34.0-9.oe2203sp2
perl
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-Attribute-Handlers
Red Hat:hummingbird:1
 before 0:1.03-524.hum1
0:1.03-524.hum1
perl-AutoLoader
Red Hat:hummingbird:1
 before 0:5.74-524.hum1
0:5.74-524.hum1
perl-AutoSplit
Red Hat:hummingbird:1
 before 0:5.74-524.hum1
0:5.74-524.hum1
Show 99 moreShow less
Affected packages
PackageAffectedFixed
perl-B
Red Hat:hummingbird:1
 before 0:1.89-524.hum1
0:1.89-524.hum1
perl-Benchmark
Red Hat:hummingbird:1
 before 0:1.27-524.hum1
0:1.27-524.hum1
perl-Class-Struct
Red Hat:hummingbird:1
 before 0:0.68-524.hum1
0:0.68-524.hum1
perl-Config-Extensions
Red Hat:hummingbird:1
 before 0:0.03-524.hum1
0:0.03-524.hum1
perl-DBM_Filter
Red Hat:hummingbird:1
 before 0:0.07-524.hum1
0:0.07-524.hum1
perl-Devel-Peek
Red Hat:hummingbird:1
 before 0:1.36-524.hum1
0:1.36-524.hum1
perl-Devel-SelfStubber
Red Hat:hummingbird:1
 before 0:1.06-524.hum1
0:1.06-524.hum1
perl-DirHandle
Red Hat:hummingbird:1
 before 0:1.05-524.hum1
0:1.05-524.hum1
perl-Dumpvalue
Red Hat:hummingbird:1
 before 0:2.27-524.hum1
0:2.27-524.hum1
perl-DynaLoader
Red Hat:hummingbird:1
 before 0:1.57-524.hum1
0:1.57-524.hum1
perl-English
Red Hat:hummingbird:1
 before 0:1.11-524.hum1
0:1.11-524.hum1
perl-Errno
Red Hat:hummingbird:1
 before 0:1.38-524.hum1
0:1.38-524.hum1
perl-ExtUtils-Constant
Red Hat:hummingbird:1
 before 0:0.25-524.hum1
0:0.25-524.hum1
perl-ExtUtils-Embed
Red Hat:hummingbird:1
 before 0:1.35-524.hum1
0:1.35-524.hum1
perl-ExtUtils-Miniperl
Red Hat:hummingbird:1
 before 0:1.14-524.hum1
0:1.14-524.hum1
perl-Fcntl
Red Hat:hummingbird:1
 before 0:1.20-524.hum1
0:1.20-524.hum1
perl-File-Basename
Red Hat:hummingbird:1
 before 0:2.86-524.hum1
0:2.86-524.hum1
perl-File-Compare
Red Hat:hummingbird:1
 before 0:1.100.800-524.hum1
0:1.100.800-524.hum1
perl-File-Copy
Red Hat:hummingbird:1
 before 0:2.41-524.hum1
0:2.41-524.hum1
perl-File-DosGlob
Red Hat:hummingbird:1
 before 0:1.12-524.hum1
0:1.12-524.hum1
perl-File-Find
Red Hat:hummingbird:1
 before 0:1.44-524.hum1
0:1.44-524.hum1
perl-File-stat
Red Hat:hummingbird:1
 before 0:1.14-524.hum1
0:1.14-524.hum1
perl-FileCache
Red Hat:hummingbird:1
 before 0:1.10-524.hum1
0:1.10-524.hum1
perl-FileHandle
Red Hat:hummingbird:1
 before 0:2.05-524.hum1
0:2.05-524.hum1
perl-FindBin
Red Hat:hummingbird:1
 before 0:1.54-524.hum1
0:1.54-524.hum1
perl-GDBM_File
Red Hat:hummingbird:1
 before 0:1.24-524.hum1
0:1.24-524.hum1
perl-Getopt-Std
Red Hat:hummingbird:1
 before 0:1.14-524.hum1
0:1.14-524.hum1
perl-Hash-Util
Red Hat:hummingbird:1
 before 0:0.32-524.hum1
0:0.32-524.hum1
perl-Hash-Util-FieldHash
Red Hat:hummingbird:1
 before 0:1.27-524.hum1
0:1.27-524.hum1
perl-I18N-Collate
Red Hat:hummingbird:1
 before 0:1.02-524.hum1
0:1.02-524.hum1
perl-I18N-LangTags
Red Hat:hummingbird:1
 before 0:0.45-524.hum1
0:0.45-524.hum1
perl-I18N-Langinfo
Red Hat:hummingbird:1
 before 0:0.24-524.hum1
0:0.24-524.hum1
perl-IO
Red Hat:hummingbird:1
 before 0:1.55-524.hum1
0:1.55-524.hum1
perl-IPC-Open3
Red Hat:hummingbird:1
 before 0:1.24-524.hum1
0:1.24-524.hum1
perl-Locale-Maketext-Simple
Red Hat:hummingbird:1
 before 0:0.21-524.hum1
0:0.21-524.hum1
perl-Math-Complex
Red Hat:hummingbird:1
 before 0:1.63-524.hum1
0:1.63-524.hum1
perl-Memoize
Red Hat:hummingbird:1
 before 0:1.17-524.hum1
0:1.17-524.hum1
perl-Module-Loaded
Red Hat:hummingbird:1
 before 0:0.08-524.hum1
0:0.08-524.hum1
perl-NDBM_File
Red Hat:hummingbird:1
 before 0:1.18-524.hum1
0:1.18-524.hum1
perl-NEXT
Red Hat:hummingbird:1
 before 0:0.69-524.hum1
0:0.69-524.hum1
perl-Net
Red Hat:hummingbird:1
 before 0:1.04-524.hum1
0:1.04-524.hum1
perl-ODBM_File
Red Hat:hummingbird:1
 before 0:1.20-524.hum1
0:1.20-524.hum1
perl-Opcode
Red Hat:hummingbird:1
 before 0:1.69-524.hum1
0:1.69-524.hum1
perl-POSIX
Red Hat:hummingbird:1
 before 0:2.23-524.hum1
0:2.23-524.hum1
perl-Pod-Functions
Red Hat:hummingbird:1
 before 0:1.14-524.hum1
0:1.14-524.hum1
perl-Pod-Html
Red Hat:hummingbird:1
 before 0:1.35-524.hum1
0:1.35-524.hum1
perl-Safe
Red Hat:hummingbird:1
 before 0:2.47-524.hum1
0:2.47-524.hum1
perl-Search-Dict
Red Hat:hummingbird:1
 before 0:1.08-524.hum1
0:1.08-524.hum1
perl-SelectSaver
Red Hat:hummingbird:1
 before 0:1.02-524.hum1
0:1.02-524.hum1
perl-SelfLoader
Red Hat:hummingbird:1
 before 0:1.28-524.hum1
0:1.28-524.hum1
perl-Symbol
Red Hat:hummingbird:1
 before 0:1.09-524.hum1
0:1.09-524.hum1
perl-Sys-Hostname
Red Hat:hummingbird:1
 before 0:1.25-524.hum1
0:1.25-524.hum1
perl-Term-Complete
Red Hat:hummingbird:1
 before 0:1.403-524.hum1
0:1.403-524.hum1
perl-Term-ReadLine
Red Hat:hummingbird:1
 before 0:1.17-524.hum1
0:1.17-524.hum1
perl-Test
Red Hat:hummingbird:1
 before 0:1.31-524.hum1
0:1.31-524.hum1
perl-Text-Abbrev
Red Hat:hummingbird:1
 before 0:1.02-524.hum1
0:1.02-524.hum1
perl-Thread
Red Hat:hummingbird:1
 before 0:3.06-524.hum1
0:3.06-524.hum1
perl-Thread-Semaphore
Red Hat:hummingbird:1
 before 0:2.13-524.hum1
0:2.13-524.hum1
perl-Tie
Red Hat:hummingbird:1
 before 0:4.6-524.hum1
0:4.6-524.hum1
perl-Tie-File
Red Hat:hummingbird:1
 before 0:1.10-524.hum1
0:1.10-524.hum1
perl-Tie-Memoize
Red Hat:hummingbird:1
 before 0:1.1-524.hum1
0:1.1-524.hum1
perl-Time
Red Hat:hummingbird:1
 before 0:1.04-524.hum1
0:1.04-524.hum1
perl-Time-Piece
Red Hat:hummingbird:1
 before 0:1.3600-524.hum1
0:1.3600-524.hum1
perl-Unicode-UCD
Red Hat:hummingbird:1
 before 0:0.81-524.hum1
0:0.81-524.hum1
perl-User-pwent
Red Hat:hummingbird:1
 before 0:1.05-524.hum1
0:1.05-524.hum1
perl-autouse
Red Hat:hummingbird:1
 before 0:1.11-524.hum1
0:1.11-524.hum1
perl-base
Red Hat:hummingbird:1
 before 0:2.27-524.hum1
0:2.27-524.hum1
perl-blib
Red Hat:hummingbird:1
 before 0:1.07-524.hum1
0:1.07-524.hum1
perl-debugger
Red Hat:hummingbird:1
 before 0:1.60-524.hum1
0:1.60-524.hum1
perl-deprecate
Red Hat:hummingbird:1
 before 0:0.04-524.hum1
0:0.04-524.hum1
perl-devel
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-diagnostics
Red Hat:hummingbird:1
 before 0:1.40-524.hum1
0:1.40-524.hum1
perl-doc
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-encoding-warnings
Red Hat:hummingbird:1
 before 0:0.14-524.hum1
0:0.14-524.hum1
perl-fields
Red Hat:hummingbird:1
 before 0:2.27-524.hum1
0:2.27-524.hum1
perl-filetest
Red Hat:hummingbird:1
 before 0:1.03-524.hum1
0:1.03-524.hum1
perl-if
Red Hat:hummingbird:1
 before 0:0.61.000-524.hum1
0:0.61.000-524.hum1
perl-interpreter
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-less
Red Hat:hummingbird:1
 before 0:0.03-524.hum1
0:0.03-524.hum1
perl-lib
Red Hat:hummingbird:1
 before 0:0.65-524.hum1
0:0.65-524.hum1
perl-libnetcfg
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-libs
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-locale
Red Hat:hummingbird:1
 before 0:1.13-524.hum1
0:1.13-524.hum1
perl-macros
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-meta-notation
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-mro
Red Hat:hummingbird:1
 before 0:1.29-524.hum1
0:1.29-524.hum1
perl-open
Red Hat:hummingbird:1
 before 0:1.13-524.hum1
0:1.13-524.hum1
perl-overload
Red Hat:hummingbird:1
 before 0:1.40-524.hum1
0:1.40-524.hum1
perl-overloading
Red Hat:hummingbird:1
 before 0:0.02-524.hum1
0:0.02-524.hum1
perl-ph
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-sigtrap
Red Hat:hummingbird:1
 before 0:1.10-524.hum1
0:1.10-524.hum1
perl-sort
Red Hat:hummingbird:1
 before 0:2.06-524.hum1
0:2.06-524.hum1
perl-subs
Red Hat:hummingbird:1
 before 0:1.04-524.hum1
0:1.04-524.hum1
perl-tests
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-utils
Red Hat:hummingbird:1
 before 0:5.42.2-524.hum1
0:5.42.2-524.hum1
perl-vars
Red Hat:hummingbird:1
 before 0:1.05-524.hum1
0:1.05-524.hum1
perl-vmsish
Red Hat:hummingbird:1
 before 0:1.04-524.hum1
0:1.04-524.hum1
perl
Ubuntu:22.04:LTS
 before 5.34.0-3ubuntu1.3, plus listed versions
5.32.1-3ubuntu35.34.0-3ubuntu15.34.0-3ubuntu1.15.34.0-3ubuntu1.2
5.34.0-3ubuntu1.3
perl
Ubuntu:20.04:LTS
 before 5.30.0-9ubuntu0.5, plus listed versions
5.28.1-6build15.30.0-75.30.0-95.30.0-9build15.30.0-9ubuntu0.25.30.0-9ubuntu0.35.30.0-9ubuntu0.4
5.30.0-9ubuntu0.5

History

History
WhenChangedSources
2026-11-02createdCVE List, EUVD, GitHub Advisories, NVD, OSV

References

Show 46 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open