Yüksek CVSS 8.6

CVE-2020-10878: Perl: tamsayı taşması

Yayın: 5 Haziran 2020 17:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Özet bilgiler

Ürün: Perl Perl
CVSS v3.1: 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS: %4,88 (yüzdelik 92)
CWE: CWE-190
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
perl-perl	—	—	5.30.3
fedoraproject-fedora	31	31	—
opensuse-leap	15.1	15.1	—
netapp-oncommand-workflow-automation	—	—	—
netapp-snap-creator-framework	—	—	—
oracle-communications-billing-and-revenue-management	12.0.0.2.0	12.0.0.2.0	—
oracle-communications-billing-and-revenue-management	12.0.0.3.0	12.0.0.3.0	—
oracle-communications-diameter-signaling-router	8.0.0	8.5.0	—
oracle-communications-eagle-application-processor	16.1.0	16.4.0	—
oracle-communications-eagle-lnp-application-processor	10.1	10.1	—
oracle-communications-eagle-lnp-application-processor	10.2	10.2	—
oracle-communications-eagle-lnp-application-processor	46.7	46.7	—
oracle-communications-eagle-lnp-application-processor	46.8	46.8	—
oracle-communications-eagle-lnp-application-processor	46.9	46.9	—
oracle-communications-lsms	13.1	13.4	—
oracle-communications-offline-mediation-controller	12.0.0.3.0	12.0.0.3.0	—
oracle-communications-performance-intelligence-center	10.3.0.0.0	10.3.0.2.1	—
oracle-communications-performance-intelligence-center	10.4.0.1.0	10.4.0.3.1	—
oracle-communications-pricing-design-center	12.0.0.3.0	12.0.0.3.0	—
oracle-configuration-manager	12.1.2.0.8	12.1.2.0.8	—
oracle-enterprise-manager-base-platform	13.4.0.0	13.4.0.0	—
oracle-sd-wan-aware	8.2	8.2	—
oracle-sd-wan-aware	9.0	9.0	—
oracle-sd-wan-aware	9.1	9.1	—
oracle-tekelec-platform-distribution	7.4.0	7.7.1	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları