CVE-2010-1158 — Perl vulnerability

CWE-1895 documents5 sources
Severity
5.0MEDIUMNVD
EPSS
0.5%
top 32.60%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PerlDebian Perl
Timeline
PublishedApr 20
Latest updateMay 2

Description

Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDperl/perl9 versions+8
▶debiandebian/perl

🔴Vulnerability Details

1
GHSA
GHSA-x7qj-rq8p-vh9r: Integer overflow in the regular expression engine in Perl 5↗2022-05-02
▶

📋Vendor Advisories

2
Red Hat
Perl: Stack overflow by processing a certain regular expression↗2010-04-06
▶
Debian
CVE-2010-1158: perl - Integer overflow in the regular expression engine in Perl 5.8.x allows context-d...↗2010
▶

💬Community

1
Bugzilla
CVE-2010-1158 Perl: Stack overflow by processing a certain regular expression↗2010-04-08
▶
CVE-2010-1158 — Perl vulnerability | cvebase