CVE-2018-18313
published 2018-12-07CVE-2018-18313: Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
critical9.1CVSS 3.0
AVNACLPRNUINSUCHINAH
Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | < 10.14.4 | 10.14.4 |
| apple | macos_mojave_10.14.4_security_update_2019-002_high_sierra_security_update_2019-0 | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | perl | < perl 5.28.0-3 (bookworm) | perl 5.28.0-3 (bookworm) |
| netapp | e-series_santricity_os_controller | 11.0 – 11.40 | — |
| perl | perl | < 5.26.3 | 5.26.3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.18.2-2ubuntu1.7 | 5.18.2-2ubuntu1.7 |
| perl | perl | >= 0 < 5.22.1-9ubuntu0.6 | 5.22.1-9ubuntu0.6 |
| perl | perl | >= 0 < 5.26.1-6ubuntu0.3 | 5.26.1-6ubuntu0.3 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
osv9.8CRITICAL