CVE-2018-18311

CRITICAL

Perl < 5.26.3 and 5.28.x < 5.28.1 - Buffer Overflow via Crafted Regular Expression

Title source: llm
STIX 2.1

Description

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

References (28)

Core 28
Core References
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT209600
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
https://lists.debian.org/debian-lts-announce/2018/11/msg00039.html
Third Party Advisory vendor-advisory x_refsource_debian
https://www.debian.org/security/2018/dsa-4347
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/106145
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1042181
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0010
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3834-2/
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0001
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:0109
Third Party Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3834-1/
Mailing List, Third Party Advisory mailing-list x_refsource_bugtraq
https://seclists.org/bugtraq/2019/Mar/42
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Mar/49
Third Party Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHBA-2019:0327
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1790
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:1942
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2019:2400
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201909-01
Issue Tracking, Patch, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=1646730
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190221-0003/
Third Party Advisory x_refsource_confirm
https://metacpan.org/changes/release/SHAY/perl-5.26.3
Third Party Advisory x_refsource_confirm
https://metacpan.org/changes/release/SHAY/perl-5.28.1
Issue Tracking, Third Party Advisory x_refsource_confirm
https://rt.perl.org/Ticket/Display.html?id=133204
Third Party Advisory x_refsource_confirm
https://kc.mcafee.com/corporate/index?page=content&id=SB10278

Scores

CVSS v3 9.8
EPSS 0.1291
EPSS Percentile 94.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-190 CWE-787
Status published
Products (27)
apple/mac_os_x < 10.14.4
canonical/ubuntu_linux 12.04
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 16.04
canonical/ubuntu_linux 18.04
canonical/ubuntu_linux 18.10
debian/debian_linux 8.0
debian/debian_linux 9.0
fedoraproject/fedora 29
mcafee/web_gateway 7.7.2 - 7.7.2.21
... and 17 more
Published Dec 07, 2018
Tracked Since Feb 18, 2026