CVE-2020-12723
גבוהה 7.5
תיאור (מקור, אנגלית)
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
מדדים
- CVSS 3.1
-
7.5 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 6% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-120
מוצרים מושפעים
perl: perl; netapp: oncommand workflow automation; netapp: snap creator framework; fedoraproject: fedora; opensuse: leap; oracle: communications billing and revenue management; oracle: communications diameter signaling router; oracle: communications eagle application processor; oracle: communications eagle lnp application processor; oracle: communications lsms; oracle: communications offline mediation controller; oracle: communications performance intelligence center; oracle: configuration manager; oracle: enterprise manager base platform; oracle: sd-wan edge
קישורים
- https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 PatchThird Party Advisory
- https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184a PatchThird Party Advisory
- https://www.oracle.com//security-alerts/cpujul2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuApr2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2021.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpujan2022.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html PatchThird Party Advisory
- https://www.oracle.com/security-alerts/cpuoct2021.html PatchThird Party Advisory
- https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 PatchThird Party Advisory