Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2023-47038

Perl: write past buffer end via illegal user-defined unicode property

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

perl

Default version status: unaffected

  • 5.30.0 to < 5.34.3affected
  • 5.36.0 to < 5.36.3affected
  • 5.38.0 to < 5.38.2affected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

  • 8100020240314121426.9fe1d287 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 4:5.32.1-481.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: affected

References