Perl vulnerabilities

Products

• Perl 48
• Dbi 10
• Database Interface 2
• File\ 2

Newest

• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… CVE-2026-13221 Fix available 9.1 CriticalJuly 13, 2026
• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack CVE-2026-57432 Fix available 8.4 HighJuly 13, 2026
• hmbrand dbi DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment CVE-2026-14740 Fix available 9.1 CriticalJuly 7, 2026
• hmbrand dbi DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders CVE-2026-14739 Fix available 9.8 CriticalJuly 7, 2026
• perl dbi DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile CVE-2026-14380 Fix available 8.8 HighJuly 7, 2026
• hmbrand dbi, red hat enterprise linux 10, enterprise linux 6 +4 more +6 more DBI versions before 1.648 for Perl saved errors in a limited-sized buffer CVE-2026-9698 Fix available 9.8 CriticalJune 9, 2026
• hmbrand dbi DBI versions before 1.648 for Perl have a heap overflow when preparsing SQL statements with more than 9 binders CVE-2026-10879 Fix available 9.8 CriticalJune 5, 2026
• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds CVE-2026-8376 Fix available 9.8 CriticalMay 25, 2026
• perl Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib CVE-2026-4176 Fix available 9.8 CriticalMarch 29, 2026
• perl Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 Fix available 5.9 MediumMay 30, 2025
• perl Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes CVE-2024-56406 Fix available 8.4 HighApril 13, 2025
• perl crypt::random, timlegge crypt\ +1 more Perl's Crypt::Random module after 1.05 and before 1.56 may use rand() function for cryptographic functions CVE-2025-1828 8.8 HighMarch 10, 2025
• perl posix 2028 The POSIX::2008 package before 0.24 for Perl has a potential _execve50c env buffer overflow. CVE-2024-55564 Fix available 9.8 CriticalDecember 9, 2024
• perl cpanminus, app\ \ +1 more The App::cpanminus package through 1.7047 for Perl downloads code via insecure HTTP, enabling... CVE-2024-45321 Fix available 8.1 HighAugust 27, 2024
• perl The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in... CVE-2021-47155 9.1 CriticalMarch 18, 2024
• perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Perl: perl for windows binary hijacking vulnerability CVE-2023-47039 7.8 HighNovember 25, 2023
• perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 more Perl: write past buffer end via illegal user-defined unicode property CVE-2023-47038 Fix available 7.0 HighNovember 25, 2023
• perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to... CVE-2022-48522 Fix available 9.8 CriticalAugust 22, 2023
• perl, http\ \ +1 more HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... CVE-2023-31486 Fix available 8.1 HighApril 28, 2023
• cpanpm project cpanpm, perl +1 more CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Fix available 8.1 HighApril 28, 2023
• fedoraproject fedora, perl comprehensive perl archive network +1 more CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Fix available 7.8 HighDecember 13, 2021
• exiftool, debian linux, fedoraproject fedora +2 more Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up... CVE-2021-22204 In KEVPublic exploitFix available EPSS 100.0% 6.8 MediumApril 23, 2021
• perl dbi, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in the DBI module before 1.643 for Perl. The hv_fetch() documentation... CVE-2019-20919 Fix available 4.7 MediumSeptember 17, 2020
• perl dbi An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open... CVE-2014-10402 Fix available 6.1 MediumSeptember 16, 2020
• microsoft perl-dbi, debian linux, fedoraproject fedora +2 more +4 more A buffer overflow was found in perl-DBI < 1.643 in DBI.xs. A local attacker who is able to supply... CVE-2020-14393 Fix available 7.1 HighSeptember 16, 2020
• perl dbi An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files... CVE-2014-10401 Fix available 6.1 MediumSeptember 11, 2020
• perl dbi, canonical ubuntu linux +1 more An issue was discovered in the DBI module before 1.632 for Perl. Using many arguments to methods... CVE-2013-7490 Fix available 5.3 MediumSeptember 11, 2020
• perl dbi An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a... CVE-2013-7491 Fix available 5.3 MediumSeptember 11, 2020
• microsoft perl-dbi, canonical ubuntu linux, debian linux +3 more +5 more An untrusted pointer dereference flaw was found in Perl-DBI < 1.643. A local attacker who is able... CVE-2020-14392 Fix available 5.5 MediumSeptember 11, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 more CVE-2020-10878 does not affect BellSoft software CVE-2020-10878 Fix available 8.6 HighJune 1, 2020
• perl, fedoraproject fedora, opensuse leap +15 more +17 more CVE-2020-10543 does not affect BellSoft software CVE-2020-10543 Fix available EPSS 11.3% 8.2 HighJune 1, 2020
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid... CVE-2018-18314 Fix available 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +6 more +8 more Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers... CVE-2018-18313 Fix available 9.1 CriticalNovember 29, 2018
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18312 Fix available EPSS 12.8% 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +15 more +17 more Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18311 Fix available EPSS 11.7% 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, archive\ \ +6 more +8 more In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... CVE-2018-12015 Fix available 7.5 HighJune 7, 2018
• perl, canonical ubuntu linux, debian linux +2 more Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent... CVE-2018-6913 Fix available EPSS 10.7% 9.8 CriticalApril 14, 2018
• perl, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular... CVE-2018-6798 Fix available 7.5 HighApril 14, 2018
• perl, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap... CVE-2018-6797 Fix available 9.8 CriticalApril 14, 2018
• perl Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24... CVE-2017-12814 9.8 CriticalSeptember 27, 2017
• perl Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26... CVE-2017-12883 Fix available 9.1 CriticalSeptember 19, 2017
• perl Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and... CVE-2017-12837 Fix available 7.5 HighSeptember 19, 2017
• perl The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a... CVE-2015-8608 9.8 CriticalFebruary 7, 2017
• perl, canonical ubuntu linux, debian linux +2 more +4 more The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a... CVE-2016-6185 Fix available 7.8 HighJuly 25, 2016
• perl, apache spamassassin, debian linux +2 more +4 more (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... CVE-2016-1238 Fix available 7.8 HighJuly 25, 2016
• perl, fedoraproject fedora +1 more The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5... CVE-2015-8853 Fix available 7.5 HighMay 20, 2016
• perl, canonical ubuntu linux, debian linux +7 more +9 more Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child... CVE-2016-2381 Fix available 7.5 HighMarch 1, 2016
• perl pathtools, canonical ubuntu linux, debian linux +2 more The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does... CVE-2015-8607 Fix available 7.3 HighJanuary 11, 2016
• perl, apple mac os x +1 more Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and... CVE-2013-7422 Fix available 7.5 HighAugust 16, 2015
• Show olderLoading…