CVE-2018-18311
published 2018-12-07CVE-2018-18311: Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Affected
35 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | < 10.14.4 | 10.14.4 |
| apple | macos_mojave_10.14.4_security_update_2019-002_high_sierra_security_update_2019-0 | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | perl | < perl 5.28.1-1 (bookworm) | perl 5.28.1-1 (bookworm) |
| fedoraproject | fedora | — | — |
| mcafee | web_gateway | >= 7.7.2 < 7.7.2.21 | 7.7.2.21 |
| mcafee | web_gateway | >= 7.8.2 < 7.8.2.8 | 7.8.2.8 |
| mcafee | web_gateway | >= 8.0.0 < 8.1.1 | 8.1.1 |
| perl | perl | < 5.26.3 | 5.26.3 |
| perl | perl | >= 0 < 5.28.1-1 | 5.28.1-1 |
| perl | perl | >= 0 < 5.28.1-1 | 5.28.1-1 |
| perl | perl | >= 0 < 5.28.1-1 | 5.28.1-1 |
| perl | perl | >= 0 < 5.28.1-1 | 5.28.1-1 |
| perl | perl | >= 0 < 5.18.2-2ubuntu1.7 | 5.18.2-2ubuntu1.7 |
| perl | perl | >= 0 < 5.22.1-9ubuntu0.6 | 5.22.1-9ubuntu0.6 |
| perl | perl | >= 0 < 5.26.1-6ubuntu0.3 | 5.26.1-6ubuntu0.3 |
| perl | perl | >= 5.28.0 < 5.28.1 | 5.28.1 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL