perl vulnerabilities (Red Hat)
47 vulnerabilities.
-
perlRed Hat Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch 5.7 Medium -
perlRed Hat Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perlRed Hat Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack 8.4 High -
perlRed Hat IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob 7.3 High -
perlRed Hat Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header 7.5 High -
perlRed Hat Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory 9.1 Critical -
perlRed Hat Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perlRed Hat Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes 8.4 High -
perlRed Hat Perl: write past buffer end via illegal user-defined unicode property 7.0 High -
perlRed Hat In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to... 9.8 Critical -
perlRed Hat HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... 8.1 High -
perlRed Hat CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 8.1 High -
perlRed Hat CVE-2020-12723 does not affect BellSoft software 7.5 High -
perlRed Hat CVE-2020-10878 does not affect BellSoft software 8.6 High -
perlRed Hat CVE-2020-10543 does not affect BellSoft software 8.2 High -
perlRed Hat Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid... 9.8 Critical -
perlRed Hat Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers... 9.1 Critical -
perlRed Hat Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlRed Hat Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlRed Hat In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... 7.5 High -
perlRed Hat Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent... 9.8 Critical -
perlRed Hat Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26... 9.1 Critical -
perlRed Hat Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and... 7.5 High -
perlRed Hat The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5... 7.5 High -
perlRed Hat Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child... 7.5 High -
perlRed Hat The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a... 7.5 High -
perlRed Hat The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7... 7.5 High -
perlRed Hat Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,... 7.5 High -
perlRed Hat CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P... 5.0 Medium -
perlRed Hat Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent... 7.5 High -
perlRed Hat Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44... 5.1 Medium -
perlRed Hat The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x... 5.0 Medium -
perlRed Hat CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm... 4.3 Medium -
perlRed Hat The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and... 4.3 Medium -
perlRed Hat The Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent attackers to bypass... 7.5 High -
perlRed Hat The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl, as used in PostgreSQL... 8.5 High -
perlRed Hat Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows... 6.9 Medium -
perlRed Hat Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8... 6.9 Medium -
perlRed Hat Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of... 5.0 Medium -
perlRed Hat Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... 7.5 High -
perlRed Hat A regression error in the Perl package for Red Hat Enterprise Linux 4 omits the patch for CVE... 2.1 Low -
perlRed Hat Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6... 4.6 Medium -
perlRed Hat Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to... 1.2 Low -
perlRed Hat Buffer overflow in the PerlIO implementation in Perl 5.8.0, when installed with setuid support ... 2.1 Low -
perlRed Hat The PerlIO implementation in Perl 5.8.0, when installed with setuid support (sperl), allows local... 4.6 Medium -
perlRed Hat Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read... 2.6 Low -
perlRed Hat Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating... 2.1 Low