CVE-2020-12723
published 2020-06-05CVE-2020-12723: regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Affected
29 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | macos_catalina_10.15.6_security_update_2020-004_mojave_security_update_2020-004 | — | — |
| debian | perl | < perl 5.30.3-1 (bookworm) | perl 5.30.3-1 (bookworm) |
| fedoraproject | fedora | — | — |
| opensuse | leap | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_billing_and_revenue_management | — | — |
| oracle | communications_diameter_signaling_router | 8.0.0 – 8.5.0 | — |
| oracle | communications_eagle_application_processor | 16.1.0 – 16.4.0 | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_eagle_lnp_application_processor | — | — |
| oracle | communications_lsms | 13.1 – 13.4 | — |
| oracle | communications_offline_mediation_controller | — | — |
| oracle | communications_performance_intelligence_center | 10.3.0.0.0 – 10.3.0.2.1 | — |
| oracle | communications_performance_intelligence_center | 10.4.0.1.0 – 10.4.0.3.1 | — |
| oracle | configuration_manager | — | — |
| oracle | enterprise_manager_base_platform | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | sd-wan_edge | — | — |
| oracle | tekelec_platform_distribution | 7.4.0 – 7.7.1 | — |
| perl | perl | < 5.30.3 | 5.30.3 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
| perl | perl | >= 0 < 5.30.3-1 | 5.30.3-1 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv8.2HIGH