CVE-2020-10878
גבוהה 8.6
תיאור (מקור, אנגלית)
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
מדדים
- CVSS 3.1
-
8.6 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - EPSS — סבירות ניצול
- 5% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-190
מוצרים מושפעים
perl: perl; fedoraproject: fedora; opensuse: leap; netapp: oncommand workflow automation; netapp: snap creator framework; oracle: communications billing and revenue management; oracle: communications diameter signaling router; oracle: communications eagle application processor; oracle: communications eagle lnp application processor; oracle: communications lsms; oracle: communications offline mediation controller; oracle: communications performance intelligence center; oracle: communications pricing design center; oracle: configuration manager; oracle: enterprise manager base platform
קישורים
- https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 PatchThird Party Advisory
- https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 PatchThird Party Advisory
- https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c PatchThird Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2022.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html PatchThird Party Advisory