CVE-2020-10543
published 2020-06-05CVE-2020-10543: Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
high8.2CVSS 3.1
AVNACLPRNUINSUCNILAH
Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Affected
32 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | perl | < perl 5.30.3-1 (bookworm) | perl 5.30.3-1 (bookworm) |
| fedoraproject | fedora | — | — |
| opensuse | leap | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_diameter_signaling_router | 8.0.0 – 8.5.0 | — |
| oracle | communications_eagle_application_processor | 16.1.0 – 16.4.0 | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_lsms | 13.1 – 13.4 | — |
| oracle | communications_offline_mediation_controller | — | — |
| oracle | communications_performance_intelligence_center | 10.3.0.0.0 – 10.3.0.2.1 | — |
| oracle | communications_performance_intelligence_center | 10.4.0.1.0 – 10.4.0.3.1 | — |
| oracle | communications_pricing_design_center | — | — |
| oracle | configuration_manager | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | tekelec_platform_distribution | 7.4.0 – 7.7.1 | — |
| perl | perl | < 5.30.3 | 5.30.3 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
CVSS provenance
nvdv3.18.2HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
osv8.2HIGH