CVE-2017-12814

Name of the Vulnerable Software and Affected Versions Perl versions prior to 5.24.3-RC1 Perl versions 5.26.x prior to 5.26.1-RC1

Description The issue is related to a stack-based buffer overflow in the CPerlHost::Add method. This method is located in the win32/perlhost.h file in Perl. The overflow can be triggered by a long environment variable, allowing attackers to execute arbitrary code.

Recommendations For versions prior to 5.24.3-RC1, update to version 5.24.3-RC1 or later. For versions 5.26.x prior to 5.26.1-RC1, update to version 5.26.1-RC1 or later.