{"id":"CVE-2018-6798","aliases":["ALPINE-CVE-2018-6798","BELL-CVE-2018-6798","DEBIAN-CVE-2018-6798","EUVD-2018-18545","GHSA-pfh3-76fp-4978","MGASA-2018-0241","RHSA-2018:1192","SUSE-SU-2018:0976-1","SUSE-SU-2018:1074-1","SUSE-SU-2018:1972-1","SUSE-SU-2018:1972-2","SUSE-SU-2024:1630-1","SUSE-SU-2024:1762-1","SUSE-SU-2024:1762-2","UBUNTU-CVE-2018-6798","USN-3625-1"],"status":"published","title":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular...","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0393,"percentile":0.90442,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2018-04-14T00:00:00Z","modified":"2026-10-24T10:30:30Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"perl","fixed_in":["5.24.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"perl","fixed_in":["5.24.4-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"perl","fixed_in":["5.26.2-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"perl","fixed_in":["5.26.1-6"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"perl","fixed_in":["5.26.1-6"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"perl","fixed_in":["5.26.1-6"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"perl","fixed_in":["5.22.1-9ubuntu0.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.24.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.24.4-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.22"},{"fixed":"5.26.2-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-6"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-6"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-6"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.3-3.2.mga6"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Attribute-Handlers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Devel-Peek","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Devel-SelfStubber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Errno","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-ExtUtils-Embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-ExtUtils-Miniperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-IO","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-IO-Zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Locale-Maketext-Simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.21-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Math-BigInt-FastCalc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Math-BigRat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2608.02-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Math-Complex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.59-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Memoize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.03-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Module-Loaded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.08-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Net-Ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.43-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Pod-Html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-SelfLoader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-Time-Piece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.31-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-bignum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.42-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-libnetcfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-open","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-perl524-perl-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.24.0-380.el6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Attribute-Handlers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.99-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Devel-Peek","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Devel-SelfStubber","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Errno","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.25-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-ExtUtils-Embed","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-ExtUtils-Miniperl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.05-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-IO","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.36-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-IO-Zlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.10-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Locale-Maketext-Simple","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.21-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Math-BigInt-FastCalc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.40-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Math-BigRat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2608.02-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Math-Complex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.59-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Memoize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.03-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Module-Loaded","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.08-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Net-Ping","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.43-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Pod-Html","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.22-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-SelfLoader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.23-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.28-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-Time-Piece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.31-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-bignum","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.42-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-libnetcfg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-macros","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-open","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.10-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-perl524-perl-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.24.0-380.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-64.81.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-64.81.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.0-64.81.10.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.11.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-12.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150000.7.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150000.7.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150000.7.18.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.26.1-150300.17.17.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.1-9ubuntu0.3"}]}],"versions":["5.20.2-6","5.22.1-3","5.22.1-4","5.22.1-5","5.22.1-7","5.22.1-8","5.22.1-9","5.22.1-9ubuntu0.2"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.18.2-2ubuntu1.4"}]}],"versions":["5.14.2-21build1","5.18.1-4","5.18.1-4build1","5.18.1-5","5.18.2-2","5.18.2-2ubuntu1","5.18.2-2ubuntu1.1","5.18.2-2ubuntu1.3"],"bundled":6},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"perl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.22.1-9ubuntu0.3"}]}],"versions":["5.20.2-6","5.22.1-3","5.22.1-4","5.22.1-5","5.22.1-7","5.22.1-8","5.22.1-9","5.22.1-9ubuntu0.2"],"bundled":6}],"products":[{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"debian","product":"debian_linux"},{"vendor":"perl","product":"perl"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1192","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.securitytracker.com/id/1040681","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://usn.ubuntu.com/3625-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2018/dsa-4172","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://security.gentoo.org/glsa/201909-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://rt.perl.org/Public/Bug/Display.html?id=132063","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6798","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pfh3-76fp-4978"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-6798","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-6798","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-6798","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0241.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22913","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547779","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1547783","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1192.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-6797","tags":["advisory"]},{"url":"https://rt.perl.org/Public/Bug/Display.html?id=132227","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-6798","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-6798","tags":["advisory","report"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180976-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082216","tags":["report"]},{"url":"https://bugzilla.suse.com/1082233","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6798","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6913","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181074-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1082234","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6797","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181972-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1068565","tags":["report"]},{"url":"https://bugzilla.suse.com/1096718","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12015","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181972-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241630-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1047178","tags":["report"]},{"url":"https://bugzilla.suse.com/1210999","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-31484","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241762-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1213638","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241762-2/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-6798","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3625-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-8853","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-6185","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-6512","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6797","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-6913","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:00:00Z","modified":"2024-08-05T06:10:11.392Z","updated_at":"2026-11-02T14:35:05.961936Z"}],"euvd":[{"id":"EUVD-2018-18545","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:00:00Z","modified":"2024-08-05T06:10:11Z","updated_at":"2026-11-03T02:40:07.110514Z"}],"ghsa":[{"id":"GHSA-pfh3-76fp-4978","title":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular...","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2022-05-13T01:25:17Z","modified":"2023-02-01T05:07:37Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:50:34.561364Z"}],"nvd":[{"id":"CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:29:00.58Z","modified":"2026-06-17T02:02:18.233Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:04:25.506659Z"}],"osv":[{"id":"ALPINE-CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:29:00.58Z","modified":"2026-10-23T17:17:55.285111717Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"BELL-CVE-2018-6798","title":"CVE-2018-6798 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:14:59.820195Z","modified":"2026-01-26T09:49:59.893699Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:29:00.58Z","modified":"2026-10-24T10:30:30.541361954Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:09.74357Z"},{"id":"DEBIAN-CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-17T20:29:00.58Z","modified":"2026-10-23T18:03:23.488311548Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"RHSA-2018:1192","title":"Red Hat Security Advisory: rh-perl524-perl security update","status":"published","published":"2024-09-13T12:53:29Z","modified":"2026-06-29T10:19:46Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-6798","description":"An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.","status":"published","published":"2018-04-14T00:00:00Z","modified":"2026-04-22T12:02:22.382919Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:18.772093Z"},{"id":"MGASA-2018-0241","title":"Updated perl packages fix security vulnerabilities","description":"Brian Carpenter reported that a crafted regular expression could cause\na heap buffer write overflow, with control over the bytes written\n(CVE-2018-6797).\n\nNguyen Duc Manh reported that matching a crafted locale dependent\nregular expression can cause a heap-based buffer over-read and\npotentially information disclosure (CVE-2018-6798).\n\nGwanYeong Kim reported that 'pack()' could cause a heap buffer write\noverflow with a large item count (CVE-2018-6913).\n","status":"published","published":"2018-05-16T08:24:56Z","modified":"2026-04-16T06:23:04.461554274Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2018:0976-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216).\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233).\n","status":"published","published":"2018-04-18T06:30:09Z","modified":"2026-02-04T04:29:15.295258Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1074-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216).\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233).\n- CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234).\n","status":"published","published":"2018-04-25T12:14:48Z","modified":"2025-05-02T04:08:23.723125Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:1972-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nThese security issue were fixed: \n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216).\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233).\n- CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234).\n- CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a\n  directory-traversal protection mechanism and overwrite arbitrary files\n  (bsc#1096718)\n\nThis non-security issue was fixed: \n\n- fix debugger crash in tab completion with Term::ReadLine::Gnu [bsc#1068565]\n\n","status":"published","published":"2018-07-17T06:08:14Z","modified":"2026-02-04T02:53:10.966831Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:1972-2","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nThese security issue were fixed: \n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216).\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233).\n- CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234).\n- CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a\n  directory-traversal protection mechanism and overwrite arbitrary files\n  (bsc#1096718)\n\nThis non-security issue was fixed: \n\n- fix debugger crash in tab completion with Term::ReadLine::Gnu [bsc#1068565]\n\n","status":"published","published":"2018-10-18T12:47:55Z","modified":"2026-02-04T03:43:06.12785Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2024:1630-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)\n- CVE-2023-31484: Enabled TLS certificate verification in CPAN (bsc#1210999)\n- CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178)\n","status":"published","published":"2024-05-14T07:20:51Z","modified":"2026-02-04T03:21:44.562926Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1762-1","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)\n\nNon-security issue fixed:\n\n- make Net::FTP work with TLS 1.3 (bsc#1213638)\n","status":"published","published":"2024-05-22T14:14:52Z","modified":"2026-02-04T03:08:38.69281Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1762-2","title":"Security update for perl","description":"This update for perl fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)\n- CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)\n\nNon-security issue fixed:\n\n- make Net::FTP work with TLS 1.3 (bsc#1213638)\n","status":"published","published":"2024-05-22T14:14:49Z","modified":"2026-02-04T02:27:37.915672Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-3625-1","title":"perl vulnerabilities","description":"It was discovered that Perl incorrectly handled certain regular\nexpressions. An attacker could possibly use this issue to cause Perl to\nhang, resulting in a denial of service. This issue only affected Ubuntu\n14.04 LTS. (CVE-2015-8853)\n\nIt was discovered that Perl incorrectly loaded libraries from the current\nworking directory. A local attacker could possibly use this issue to\nexecute arbitrary code. This issue only affected Ubuntu 14.04 LTS and\nUbuntu 16.04 LTS. (CVE-2016-6185)\n\nIt was discovered that Perl incorrectly handled the rmtree and remove_tree\nfunctions. A local attacker could possibly use this issue to set the mode\non arbitrary files. This issue only affected Ubuntu 14.04 LTS and Ubuntu\n16.04 LTS. (CVE-2017-6512)\n\nBrian Carpenter discovered that Perl incorrectly handled certain regular\nexpressions. An attacker could use this issue to cause Perl to crash,\nresulting in a denial of service, or possibly execute arbitrary code. This\nissue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 17.10.\n(CVE-2018-6797)\n\nNguyen Duc Manh discovered that Perl incorrectly handled certain regular\nexpressions. An attacker could use this issue to cause Perl to crash,\nresulting in a denial of service. This issue only affected Ubuntu 16.04 LTS\nand Ubuntu 17.10. (CVE-2018-6798)\n\nGwanYeong Kim discovered that Perl incorrectly handled certain data when\nusing the pack function. An attacker could use this issue to cause Perl to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode. (CVE-2018-6913)\n","status":"published","published":"2018-04-16T12:47:44Z","modified":"2026-04-22T09:44:04.737373Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}