Perl Perl vulnerabilities

• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string bra… CVE-2026-13221 Fix available 9.1 CriticalJuly 13, 2026
• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack CVE-2026-57432 Fix available 8.4 HighJuly 13, 2026
• perl Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds CVE-2026-8376 Fix available 9.8 CriticalMay 25, 2026
• perl Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib CVE-2026-4176 Fix available 9.8 CriticalMarch 29, 2026
• perl Perl threads have a working directory race condition where file operations may target unintended paths CVE-2025-40909 Fix available 5.9 MediumMay 30, 2025
• perl Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes CVE-2024-56406 Fix available 8.4 HighApril 13, 2025
• perl The Net::IPV4Addr module 0.10 for Perl does not properly consider extraneous zero characters in... CVE-2021-47155 9.1 CriticalMarch 18, 2024
• perl, red hat enterprise linux 6, enterprise linux 7 +2 more +4 more Perl: perl for windows binary hijacking vulnerability CVE-2023-47039 7.8 HighNovember 25, 2023
• perl, fedoraproject fedora, red hat enterprise linux 6 +6 more +8 more Perl: write past buffer end via illegal user-defined unicode property CVE-2023-47038 Fix available 7.0 HighNovember 25, 2023
• perl, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to... CVE-2022-48522 Fix available 9.8 CriticalAugust 22, 2023
• perl, http\ \ +1 more HTTP::Tiny 0.082, a Perl core module since 5.13.9 and available standalone on CPAN, has an... CVE-2023-31486 Fix available 8.1 HighApril 28, 2023
• cpanpm project cpanpm, perl +1 more CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. CVE-2023-31484 Fix available 8.1 HighApril 28, 2023
• fedoraproject fedora, perl comprehensive perl archive network +1 more CPAN 2.28 allows Signature Verification Bypass. CVE-2020-16156 Fix available 7.8 HighDecember 13, 2021
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 more CVE-2020-10878 does not affect BellSoft software CVE-2020-10878 Fix available 8.6 HighJune 1, 2020
• perl, fedoraproject fedora, opensuse leap +15 more +17 more CVE-2020-10543 does not affect BellSoft software CVE-2020-10543 Fix available EPSS 11.3% 8.2 HighJune 1, 2020
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid... CVE-2018-18314 Fix available 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +6 more +8 more Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers... CVE-2018-18313 Fix available 9.1 CriticalNovember 29, 2018
• perl, canonical ubuntu linux, debian linux +5 more +7 more Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18312 Fix available EPSS 12.8% 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, canonical ubuntu linux +15 more +17 more Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular... CVE-2018-18311 Fix available EPSS 11.7% 9.8 CriticalNovember 29, 2018
• perl, apple mac os x, archive\ \ +6 more +8 more In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory... CVE-2018-12015 Fix available 7.5 HighJune 7, 2018
• perl, canonical ubuntu linux, debian linux +2 more Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent... CVE-2018-6913 Fix available EPSS 10.7% 9.8 CriticalApril 14, 2018
• perl, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular... CVE-2018-6798 Fix available 7.5 HighApril 14, 2018
• perl, canonical ubuntu linux, debian linux +2 more +4 more An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap... CVE-2018-6797 Fix available 9.8 CriticalApril 14, 2018
• perl Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24... CVE-2017-12814 9.8 CriticalSeptember 27, 2017
• perl Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26... CVE-2017-12883 Fix available 9.1 CriticalSeptember 19, 2017
• perl Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and... CVE-2017-12837 Fix available 7.5 HighSeptember 19, 2017
• perl The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a... CVE-2015-8608 9.8 CriticalFebruary 7, 2017
• perl, canonical ubuntu linux, debian linux +2 more +4 more The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a... CVE-2016-6185 Fix available 7.8 HighJuly 25, 2016
• perl, apache spamassassin, debian linux +2 more +4 more (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin... CVE-2016-1238 Fix available 7.8 HighJuly 25, 2016
• perl, fedoraproject fedora +1 more The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5... CVE-2015-8853 Fix available 7.5 HighMay 20, 2016
• perl, canonical ubuntu linux, debian linux +7 more +9 more Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child... CVE-2016-2381 Fix available 7.5 HighMarch 1, 2016
• perl, apple mac os x +1 more Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and... CVE-2013-7422 Fix available 7.5 HighAugust 16, 2015
• data dumper project dumper, perl +1 more The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows... CVE-2014-4330 Fix available 2.1 LowSeptember 30, 2014
• perl The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions,... CVE-2010-4777 Public exploitFix available 4.3 MediumFebruary 10, 2014
• perl The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a... CVE-2013-1667 Fix available 7.5 HighMarch 9, 2013
• perl The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7... CVE-2012-6329 Public exploitFix available EPSS 63.7% 7.5 HighJanuary 4, 2013
• perl The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent... CVE-2011-2728 Fix available 4.3 MediumDecember 21, 2012
• perl Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5,... CVE-2012-5195 Fix available 7.5 HighDecember 11, 2012
• perl Multiple format string vulnerabilities in dbdimp.c in DBD::Pg (aka DBD-Pg or libdbd-pg-perl)... CVE-2012-1151 Fix available 5.0 MediumMarch 11, 2012
• dan kogai encode module, perl +1 more Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44... CVE-2011-2939 Fix available 5.1 MediumJanuary 13, 2012
• perl Perl 5.10.x allows context-dependent attackers to cause a denial of service (NULL pointer... CVE-2011-0761 Public exploitFix available 5.0 MediumMay 13, 2011
• perl The (1) lc, (2) lcfirst, (3) uc, and (4) ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x... CVE-2011-1487 Public exploitFix available EPSS 10.6% 5.0 MediumApril 11, 2011
• perl Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent... CVE-2010-1158 5.0 MediumApril 20, 2010
• perl Perl 5.10.1 allows context-dependent attackers to cause a denial of service (application crash)... CVE-2009-3626 Fix available 5.0 MediumOctober 29, 2009
• perl The rmtree function in lib/File/Path.pm in Perl 5.10 does not properly check permissions before... CVE-2008-2827 Public exploitFix available 4.6 MediumJune 23, 2008
• perl Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of... CVE-2008-1927 Fix available 5.0 MediumApril 23, 2008
• perl Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6... CVE-2005-3962 Fix available 4.6 MediumDecember 1, 2005
• perl suidperl, debian linux +1 more Multiple vulnerabilities in suidperl 5.6.1 and earlier allow a local user to obtain sensitive... CVE-2003-0618 Fix available 2.1 LowFebruary 1, 2004
• perl Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows... CVE-1999-1386 5.5 MediumDecember 31, 1999