CVE-2018-18314
published 2018-12-07CVE-2018-18314: Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| debian | debian_linux | — | — |
| debian | perl | < perl 5.28.0-3 (bookworm) | perl 5.28.0-3 (bookworm) |
| netapp | e-series_santricity_os_controller | 11.0 – 11.40 | — |
| perl | perl | < 5.26.3 | 5.26.3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.28.0-3 | 5.28.0-3 |
| perl | perl | >= 0 < 5.18.2-2ubuntu1.7 | 5.18.2-2ubuntu1.7 |
| perl | perl | >= 0 < 5.22.1-9ubuntu0.6 | 5.22.1-9ubuntu0.6 |
| perl | perl | >= 0 < 5.26.1-6ubuntu0.3 | 5.26.1-6ubuntu0.3 |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL