PT-2017-3767 · Perl+3 · Perl+3

CVE-2018-18314

·

Publicado

2017-06-24

·

Atualizado

2020-07-15

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Perl versions prior to 5.26.3
Description: The issue is related to errors in processing regular expressions, which can lead to a buffer overflow, allowing an attacker to execute arbitrary code. This can be triggered by a crafted regular expression that causes invalid write operations.
Recommendations: For versions prior to 5.26.3, update to version 5.26.3 or later to resolve the issue.

Exploit

Correção

DoS

Heap Based Buffer Overflow

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-122CWE-119

Identificadores relacionados

ALT-PU-2019-1131
BDU:2019-00883
CVE-2018-18314
DSA-4347-1
OPENSUSE-SU-2018_4258-1
RHSA-2019:0001
RHSA-2019:0010
RHSA-2026:7604
SUSE-SU-2018:4187-1
USN-3834-1

Produtos afetados

Alt Linux
Perl
Suse
Ubuntu