CVE-2020-12723
published 2020-06-05CVE-2020-12723: regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
5.97%
93.2th percentile
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos_catalina_10.15.6_security_update_2020-004_mojave_security_update_2020-004 | — | — |
| debian | perl | < perl 5.30.3-1 (bookworm) | perl 5.30.3-1 (bookworm) |
| fedoraproject | fedora | — | — |
| opensuse | leap | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_diameter_signaling_router | 8.0.0 – 8.5.0 | — |
| oracle | communications_eagle_application_processor | 16.1.0 – 16.4.0 | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_lsms | 13.1 – 13.4 | — |
| oracle | communications_offline_mediation_controller | — | — |
| oracle | communications_performance_intelligence_center | 10.3.0.0.0 – 10.3.0.2.1 | — |
| oracle | communications_performance_intelligence_center | 10.4.0.1.0 – 10.4.0.3.1 | — |
| oracle | configuration_manager | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | tekelec_platform_distribution | 7.4.0 – 7.7.1 | — |
| perl | perl | < 5.30.3 | 5.30.3 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv8.2HIGH
vendor_ubuntu8.2HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
perl vulnerabilities
osv·2020-10-27·CVSS 8.2
CVE-2020-10543 [HIGH] perl vulnerabilities
perl vulnerabilities
USN-4602-1 fixed several vulnerabilities in Perl. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
ManhND discovered that Perl incorrectly handled certain regular
expressions. In environments where untrusted regular expressions are
evaluated, a remote attacker could possibly use this issue to cause Perl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2020-10543)
Hugo van der Sanden and Slaven Rezic discovered that Perl incorrectly
handled certain regular expressions. In environments where untrusted
regular expressions are evaluated, a remote attacker could possibly use
this issue to cause Perl to crash, resulting in a denial of service, or
possibly execute arbit
OSV
perl vulnerabilities
osv·2020-10-26·CVSS 8.2
CVE-2020-10543 [HIGH] perl vulnerabilities
perl vulnerabilities
ManhND discovered that Perl incorrectly handled certain regular
expressions. In environments where untrusted regular expressions are
evaluated, a remote attacker could possibly use this issue to cause Perl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2020-10543)
Hugo van der Sanden and Slaven Rezic discovered that Perl incorrectly
handled certain regular expressions. In environments where untrusted
regular expressions are evaluated, a remote attacker could possibly use
this issue to cause Perl to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2020-10878)
Sergey Aleynikov discovered that Perl incorrectly handled certain regular
expressions. In environments where untrusted regular expressions a
OSV
CVE-2020-12723: regcomp
osv·2020-06-05·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723: regcomp
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
OSV
CVE-2020-12723: regcomp
osv·2020-06-01·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723: regcomp
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls. An application written in Perl would only be vulnerable to this flaw if it evaluates regular expressions supplied by the attacker. Evaluating regular expressions in this fashion is known to be dangerous since the regular expression engine does not protect against denial of service attacks in this usage scenario.]
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
cisa_ics·2023-12-14
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
Release DateDecember 14, 2023
Alert CodeICSA-23-348-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
- Vulnerabilities: Improper Restriction of XML External Entity Reference, Time-of-check Time-of-use (TOCTOU) Race Condition, Command Injection, Miss
Ubuntu
Perl vulnerabilities
vendor_ubuntu·2020-10-27·CVSS 8.2
CVE-2020-10878 [HIGH] Perl vulnerabilities
Title: Perl vulnerabilities
Summary: Several security issues were fixed in Perl.
USN-4602-1 fixed several vulnerabilities in Perl. This update provides
the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
ManhND discovered that Perl incorrectly handled certain regular
expressions. In environments where untrusted regular expressions are
evaluated, a remote attacker could possibly use this issue to cause Perl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2020-10543)
Hugo van der Sanden and Slaven Rezic discovered that Perl incorrectly
handled certain regular expressions. In environments where untrusted
regular expressions are evaluated, a remote attacker could possibly use
this issue to cause Perl to crash
Ubuntu
Perl vulnerabilities
vendor_ubuntu·2020-10-26·CVSS 8.2
CVE-2020-10543 [HIGH] Perl vulnerabilities
Title: Perl vulnerabilities
Summary: Several security issues were fixed in Perl.
ManhND discovered that Perl incorrectly handled certain regular
expressions. In environments where untrusted regular expressions are
evaluated, a remote attacker could possibly use this issue to cause Perl to
crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2020-10543)
Hugo van der Sanden and Slaven Rezic discovered that Perl incorrectly
handled certain regular expressions. In environments where untrusted
regular expressions are evaluated, a remote attacker could possibly use
this issue to cause Perl to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2020-10878)
Sergey Aleynikov discovered that Perl incorrectly handled certain regular
expre
Apple
CVE-2020-12723: macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
vendor_apple·2020-07-15·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723: macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
Apple Security Update: About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
Product: macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra
CVE: CVE-2020-12723
Component: Perl
Impact: A remote attacker may be able to cause arbitrary code execution
Description: This issue was addressed with improved checks.
Red Hat
perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
vendor_redhat·2020-06-02·CVSS 7.5
CVE-2020-12723 [HIGH] CWE-20 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Statement: A vulnerability in the Perl regular expression compiler affects Red Hat Enterprise Linux 7 and 8. The flaw exists in the S_study_chunk() function's handling of GOSUB opcodes during regular expression compilation. When processing untrusted regular expressions, recursive calls to S_study_chunk() can corrupt the intermediate language state, allowing an attacker to inject malicious instructions into the compiled regular expression. This network-accessible vulnerability can lead to denial of service. To mitigate, applicatio
Debian
CVE-2020-12723: perl - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular e...
vendor_debian·2020·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723: perl - regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular e...
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Scope: local
bookworm: resolved (fixed in 5.30.3-1)
bullseye: resolved (fixed in 5.30.3-1)
forky: resolved (fixed in 5.30.3-1)
sid: resolved (fixed in 5.30.3-1)
trixie: resolved (fixed in 5.30.3-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS [fedora-all]
bugzilla·2020-06-06·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS [fedora-all]
CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and
Bugzilla
CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
bugzilla·2020-05-20·CVSS 7.5
CVE-2020-12723 [HIGH] CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
CVE-2020-12723 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS
This vulnerability is an attacker controlled corruption of the
intermediate language state of a compiled regular expression. The
corruption occurs when Perl's regular expression compiler calls
S_study_chunk() in a recursive fashion to optimize the intermediate
language representation of a regular expression. An attacker could abuse
this behavior to insert instructions into the compiled form of a Perl
regular expression.
Discussion:
Acknowledgments:
Name: Sergey Aleynikov
---
(In reply to Todd Cullum from comment #4)
> Mitigation:
>
> To mitigate this flaw, developers should not pass untrusted or uncontrolled
> data to the Perl regular expre
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.htmlhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.podhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3https://github.com/Perl/perl5/issues/16947https://github.com/Perl/perl5/issues/17743https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184ahttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/https://security.gentoo.org/glsa/202006-03https://security.netapp.com/advisory/ntap-20200611-0001/https://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujan2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.htmlhttps://github.com/Perl/perl5/blob/blead/pod/perl5303delta.podhttps://github.com/Perl/perl5/compare/v5.30.2...v5.30.3https://github.com/Perl/perl5/issues/16947https://github.com/Perl/perl5/issues/17743https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184ahttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/https://security.gentoo.org/glsa/202006-03https://security.netapp.com/advisory/ntap-20200611-0001/https://www.oracle.com//security-alerts/cpujul2021.htmlhttps://www.oracle.com/security-alerts/cpuApr2021.htmlhttps://www.oracle.com/security-alerts/cpuapr2022.htmlhttps://www.oracle.com/security-alerts/cpujan2021.htmlhttps://www.oracle.com/security-alerts/cpujan2022.htmlhttps://www.oracle.com/security-alerts/cpuoct2020.htmlhttps://www.oracle.com/security-alerts/cpuoct2021.htmlhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
2020-06-05
Published