perl vulnerabilities (openEuler)
14 vulnerabilities.
-
perlopenEuler Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass 5.3 Medium -
perlopenEuler Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch 5.7 Medium -
perlopenEuler Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perlopenEuler Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack 8.4 High -
perlopenEuler Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record 9.8 Critical -
perlopenEuler Socket versions before 2.041 for Perl have an out-of-bounds heap read 9.1 Critical -
perlopenEuler Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds 9.8 Critical -
perlopenEuler Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perlopenEuler Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes 8.4 High -
perlopenEuler In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because... 9.8 Critical -
perlopenEuler Perl: write past buffer end via illegal user-defined unicode property 7.0 High -
perlopenEuler In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to... 9.8 Critical -
perlopenEuler HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... 8.1 High -
perlopenEuler CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 8.1 High