{"id":"CVE-2017-12837","aliases":["ALPINE-CVE-2017-12837","BELL-CVE-2017-12837","DEBIAN-CVE-2017-12837","DSA-3982-1","EUVD-2017-4374","GHSA-q52c-c9hv-jc77","MGASA-2018-0047","MGASA-2018-0049","RHSA-2026:6206","SUSE-SU-2017:3092-1","UBUNTU-CVE-2017-12837","USN-3478-1","openSUSE-SU-2024:11158-1"],"status":"published","title":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and...","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.06207,"percentile":0.93562,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2017-09-19T00:00:00Z","modified":"2026-10-24T10:30:51Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"perl","fixed_in":["5.22.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"perl","fixed_in":["5.22.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"perl","fixed_in":["5.24.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"perl","fixed_in":["5.24.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"perl","fixed_in":["5.26.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"perl","fixed_in":["5.26.0-8"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"perl","fixed_in":["5.26.0-8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"perl","fixed_in":["5.26.0-8"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"perl","fixed_in":["5.18.2-2ubuntu1.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"perl","fixed_in":["5.22.1-9ubuntu0.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.24.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.24.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-8"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-8"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.0-8"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.2-3+deb8u9"}]}],"versions":["5.20.2-3","5.20.2-3+deb8u1","5.20.2-3+deb8u2","5.20.2-3+deb8u3","5.20.2-3+deb8u3+kbsd1","5.20.2-3+deb8u4","5.20.2-3+deb8u5","5.20.2-3+deb8u6","5.20.2-3+deb8u7","5.20.2-3+deb8u8"],"bundled":2},{"source":"osv","ecosystem":"Debian:9","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.24.1-3+deb9u2"}]}],"versions":["5.24.1-3","5.24.1-3+deb9u1"],"bundled":2},{"source":"osv","ecosystem":"Mageia:5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.20.1-8.7.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-libintl-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.230.0-6.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-MIME-Charset","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-4.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-MIME-EncWords","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-4.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Module-Build","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.421.0-5.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Module-Load-Conditional","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.680.0-1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Net-DNS","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.90.0-0.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Sys-Syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.330.0-7.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-Unicode-LineBreak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2014.60.0-5.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:5","package":"perl-File-Path","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.90.0-4.1.mga5"}]}],"bundled":4},{"source":"osv","ecosystem":"Mageia:6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.3-3.1.mga6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Attribute-Handlers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.03-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-AutoLoader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.74-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-AutoSplit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.74-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-B","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.89-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Benchmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.27-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Class-Struct","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.68-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Config-Extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.03-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-DBM_Filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.07-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Devel-Peek","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Devel-SelfStubber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.06-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-DirHandle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Dumpvalue","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-DynaLoader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.57-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-English","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Errno","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.38-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-ExtUtils-Constant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-ExtUtils-Embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-ExtUtils-Miniperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Fcntl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-Basename","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.86-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-Compare","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.100.800-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-Copy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.41-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-DosGlob","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.12-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-Find","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.44-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-File-stat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-FileCache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-FileHandle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.05-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-FindBin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.54-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-GDBM_File","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Getopt-Std","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Hash-Util","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.32-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Hash-Util-FieldHash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.27-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-I18N-Collate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.02-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-I18N-LangTags","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.45-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-I18N-Langinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.24-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-IO","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.55-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-IPC-Open3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.24-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Locale-Maketext-Simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.21-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Math-Complex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.63-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Memoize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Module-Loaded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.08-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-NDBM_File","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.18-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-NEXT","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.69-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Net","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.04-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-ODBM_File","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Opcode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.69-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-POSIX","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.23-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Pod-Functions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Pod-Html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.35-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Safe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.47-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Search-Dict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.08-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-SelectSaver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.02-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-SelfLoader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Symbol","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.09-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Sys-Hostname","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Term-Complete","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.403-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Term-ReadLine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.17-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.31-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Text-Abbrev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.02-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Thread","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.06-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Thread-Semaphore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.13-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Tie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Tie-File","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Tie-Memoize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Time","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.04-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Time-Piece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3600-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-Unicode-UCD","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.81-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-User-pwent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-autouse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-blib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.07-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-debugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.60-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-deprecate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.04-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-diagnostics","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.40-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-encoding-warnings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-fields","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.27-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-filetest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.03-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-if","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.61.000-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-interpreter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-less","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.03-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.65-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-libnetcfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-locale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-meta-notation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-mro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.29-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-open","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.13-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-overload","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.40-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-overloading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.02-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-ph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-sigtrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-sort","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.06-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-subs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.04-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.42.2-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-vars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"perl-vmsish","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.04-524.hum1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-2ubuntu1.3"}]}],"versions":["5.14.2-21build1","5.18.1-4","5.18.1-4build1","5.18.1-5","5.18.2-2","5.18.2-2ubuntu1","5.18.2-2ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.1-9ubuntu0.2"}]}],"versions":["5.20.2-6","5.22.1-3","5.22.1-4","5.22.1-5","5.22.1-7","5.22.1-8","5.22.1-9"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-2ubuntu1.3"}]}],"versions":["5.14.2-21build1","5.18.1-4","5.18.1-4build1","5.18.1-5","5.18.2-2","5.18.2-2ubuntu1","5.18.2-2ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.1-9ubuntu0.2"}]}],"versions":["5.20.2-6","5.22.1-3","5.22.1-4","5.22.1-5","5.22.1-7","5.22.1-8","5.22.1-9"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.34.0-1.1"}]}],"bundled":10}],"products":[{"vendor":"perl","product":"perl"}],"references":[{"url":"http://www.debian.org/security/2017/dsa-3982","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","advisory"]},{"url":"http://www.securityfocus.com/bid/100860","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180426-0001/","tags":["x_refsource_CONFIRM","x_transferred","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492091","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","VDB Entry","fix","report"]},{"url":"https://rt.perl.org/Public/Bug/Display.html?id=131582","tags":["x_refsource_CONFIRM","x_transferred","web","report"]},{"url":"https://perl5.git.perl.org/perl.git/commitdiff/96c83ed78aeea1a0496dd2b2d935869a822dc8a5","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12837","tags":["advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20180426-0001"},{"url":"https://github.com/advisories/GHSA-q52c-c9hv-jc77"},{"url":"https://security.alpinelinux.org/vuln/CVE-2017-12837","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2017-12837","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2017-12837","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0047.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19051","tags":["report"]},{"url":"https://www.debian.org/security/2016/dsa-3628","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3873","tags":["web"]},{"url":"https://www.debian.org/security/2017/dsa-3982","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0049.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=21752","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:6206","tags":["advisory"]},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48522","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10543","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6913","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12883","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-12837","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-2381","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-8853","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-6329","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6206.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=884354","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-6329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-6329","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1329106","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-8853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-8853","tags":["advisory"]},{"url":"https://rt.perl.org/Public/Bug/Display.html?id=123562","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1309214","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-2381","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-2381","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12837","tags":["advisory","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492093","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-12883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-12883","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547772","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6913","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6913","tags":["advisory"]},{"url":"https://rt.perl.org/Public/Bug/Display.html?id=131844","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837975","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10543","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234416","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48522","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48522","tags":["advisory"]},{"url":"https://github.com/Perl/perl5/commit/23cca2d1f4544cb47f1124d98c308ce1f31f09a6","tags":["article"]},{"url":"https://github.com/Perl/perl5/issues/19147","tags":["article"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20173092-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047178","tags":["report"]},{"url":"https://bugzilla.suse.com/1057721","tags":["report"]},{"url":"https://bugzilla.suse.com/1057724","tags":["report"]},{"url":"https://bugzilla.suse.com/999735","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12837","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12883","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6512","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2017-12837","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3478-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-12883","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3962","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2007-5116","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12814","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18311","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-10878","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-12723","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:00:00Z","modified":"2024-08-05T18:51:06.539Z","updated_at":"2026-11-02T14:33:17.264801Z"}],"euvd":[{"id":"EUVD-2017-4374","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:00:00Z","modified":"2024-08-05T18:51:06Z","updated_at":"2026-11-03T02:23:20.716903Z"}],"ghsa":[{"id":"GHSA-q52c-c9hv-jc77","title":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and...","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2022-05-13T01:25:18Z","modified":"2025-04-20T03:46:36Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:52.747248Z"}],"nvd":[{"id":"CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:29:00.167Z","modified":"2026-06-17T01:04:00.39Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:59.716532Z"}],"osv":[{"id":"ALPINE-CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:29:00.167Z","modified":"2026-06-15T18:18:06.76382212Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.716249Z"},{"id":"BELL-CVE-2017-12837","title":"CVE-2017-12837 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:24.80754Z","modified":"2026-01-26T09:48:58.387971Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:29:00.167Z","modified":"2026-10-24T10:30:51.004063161Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:04.159616Z"},{"id":"DEBIAN-CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T18:29:00.167Z","modified":"2026-09-01T20:03:42.610688033Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:28.50097Z"},{"id":"RHSA-2026:6206","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-04-20T10:10:24Z","modified":"2026-10-16T10:21:36Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"UBUNTU-CVE-2017-12837","description":"Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive modifier.","status":"published","published":"2017-09-19T00:00:00Z","modified":"2026-04-22T11:12:54.556179Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.122973Z"},{"id":"DSA-3982-1","title":"perl - security update","status":"published","published":"2017-09-21T00:00:00Z","modified":"2026-03-09T01:20:09.231391Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2018-0047","title":"Updated perl packages fix security vulnerability","description":"John Lightsey and Todd Rinaldo reported that the opportunistic loading of\noptional modules can make many programs unintentionally load code from the\ncurrent working directory (which might be changed to another directory\nwithout the user realising) and potentially leading to privilege escalation\n(CVE-2016-1238).\n\nThe cPanel Security Team reported a time of check to time of use (TOCTTOU)\nrace condition flaw in File::Path, a core module from Perl to create or\nremove directory trees. An attacker can take advantage of this flaw to set\nthe mode on an attacker-chosen file to a attacker-chosen value\n(CVE-2017-6512).\n\nJakub Wilk reported a heap buffer overflow flaw in the regular expression\ncompiler, allowing a remote attacker to cause a denial of service via a\n specially crafted regular expression with the case-insensitive modifier\n(CVE-2017-12837).\n\nJakub Wilk reported a buffer over-read flaw in the regular expression\nparser, allowing a remote attacker to cause a denial of service or\ninformation leak (CVE-2017-12883).\n\nThe perl-libintl-perl, perl-MIME-Charset, perl-MIME-EncWords,\nperl-Module-Build, perl-Sys-Syslog, and perl-Unicode-LineBreak packages\nhave been patched and the perl-Module-Load-Conditional and perl-Net-DNS\npackages have been updated to fix CVE-2016-1238 as well.\n\nThe perl-File-Path package has also been patched to fix CVE-2017-6512.\n","status":"published","published":"2018-01-03T15:50:51Z","modified":"2026-04-16T06:24:25.332206802Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"MGASA-2018-0049","title":"Updated perl packages fix security vulnerability","description":"Jakub Wilk reported a heap buffer overflow flaw in the regular expression\ncompiler, allowing a remote attacker to cause a denial of service via a\nspecially crafted regular expression with the case-insensitive modifier\n(CVE-2017-12837).\n\nJakub Wilk reported a buffer over-read flaw in the regular expression\nparser, allowing a remote attacker to cause a denial of service or\ninformation leak (CVE-2017-12883).\n","status":"published","published":"2018-01-03T15:50:51Z","modified":"2026-04-16T06:22:52.357012875Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"openSUSE-SU-2024:11158-1","title":"perl-32bit-5.34.0-1.1 on GA media","description":"These are all security issues fixed in the perl-32bit-5.34.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2025-05-07T18:08:17.072322Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2017:3092-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issues fixed:\n- CVE-2017-12837: Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before\n  5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service\n  (out-of-bounds write) via a regular expression with a '\\N{}' escape and the case-insensitive\n  modifier. (bnc#1057724)\n- CVE-2017-12883: Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before\n  5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information\n  or cause a denial of service (application crash) via a crafted regular expression with an invalid\n  '\\N{U+...}' escape. (bnc#1057721)\n- CVE-2017-6512: Race condition in the rmtree and remove_tree functions in the File-Path module\n  before 2.13 for Perl allows attackers to set the mode on arbitrary files via vectors involving\n  directory-permission loosening logic. (bnc#1047178)\n\nBug fixes:\n- backport set_capture_string changes from upstream (bsc#999735)\n- reformat baselibs.conf as source validator workaround\n","status":"published","published":"2017-11-24T15:19:55Z","modified":"2026-02-04T04:26:17.633511Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"USN-3478-1","title":"perl vulnerabilities","description":"Jakub Wilk discovered that Perl incorrectly handled certain regular\nexpressions. An attacker could use this issue to cause Perl to crash,\nresulting in a denial of service, or possibly execute arbitrary code.\n(CVE-2017-12837, CVE-2017-12883)\n","status":"published","published":"2017-11-13T12:59:19Z","modified":"2026-04-22T09:40:50.410828Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}