perl vulnerabilities (openSUSE)
27 vulnerabilities.
-
perlopenSUSE Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… 9.1 Critical -
perlopenSUSE Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack 8.4 High -
perlopenSUSE Socket versions before 2.041 for Perl have an out-of-bounds heap read 9.1 Critical -
perlopenSUSE IO::Uncompress::Unzip versions before 2.215 for Perl propagate uncaught exception when parsing zip header with malformed DOS date 5.5 Medium -
perlopenSUSE Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds 9.8 Critical -
perlopenSUSE Perl threads have a working directory race condition where file operations may target unintended paths 5.9 Medium -
perlopenSUSE Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes 8.4 High -
perlopenSUSE Perl: perl for windows binary hijacking vulnerability 7.8 High -
perlopenSUSE Perl: write past buffer end via illegal user-defined unicode property 7.0 High -
perlopenSUSE CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. 8.1 High -
perlopenSUSE CVE-2020-12723 does not affect BellSoft software 7.5 High -
perlopenSUSE CVE-2020-10878 does not affect BellSoft software 8.6 High -
perlopenSUSE CVE-2020-10543 does not affect BellSoft software 8.2 High -
perlopenSUSE Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlopenSUSE Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... 9.8 Critical -
perlopenSUSE Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent... 9.8 Critical -
perlopenSUSE An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular... 7.5 High -
perlopenSUSE Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24... 9.8 Critical -
perlopenSUSE Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26... 9.1 Critical -
perlopenSUSE Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and... 7.5 High -
perlopenSUSE Race condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for... 5.9 Medium -
perlopenSUSE The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions,... 4.3 Medium -
perlopenSUSE Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary... 4.3 Medium -
perlopenSUSE CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm... 4.3 Medium -
perlopenSUSE The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and... 4.3 Medium -
perlopenSUSE Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in... 7.5 High -
perlopenSUSE Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6... 4.6 Medium