CVE-2018-6797
perl: heap write overflow in regcomp.c
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD, Photon OS. Niedriger laut Red Hat (mittel), Ubuntu (mittel).
Beschreibung
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | perl | 5.24.1-1.ph1 |
| Photon OS 2.0 | perl | 5.24.1-5.ph2 |
| alpine 3.10 | perl | 5.26.2-r0 |
| alpine 3.11 | perl | 5.26.2-r0 |
| alpine 3.12 | perl | 5.26.2-r0 |
| alpine 3.13 | perl | 5.26.2-r0 |
| alpine 3.14 | perl | 5.26.2-r0 |
| alpine 3.15 | perl | 5.26.2-r0 |
| alpine 3.16 | perl | 5.26.2-r0 |
| alpine 3.17 | perl | 5.26.2-r0 |
| alpine 3.18 | perl | 5.26.2-r0 |
| alpine 3.19 | perl | 5.26.2-r0 |
Alle 36 Einträge aus 36 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| Photon OS 1.0 | perl | 5.24.1-1.ph1 |
| Photon OS 2.0 | perl | 5.24.1-5.ph2 |
| alpine 3.10 | perl | 5.26.2-r0 |
| alpine 3.11 | perl | 5.26.2-r0 |
| alpine 3.12 | perl | 5.26.2-r0 |
| alpine 3.13 | perl | 5.26.2-r0 |
| alpine 3.14 | perl | 5.26.2-r0 |
| alpine 3.15 | perl | 5.26.2-r0 |
| alpine 3.16 | perl | 5.26.2-r0 |
| alpine 3.17 | perl | 5.26.2-r0 |
| alpine 3.18 | perl | 5.26.2-r0 |
| alpine 3.19 | perl | 5.26.2-r0 |
| alpine 3.20 | perl | 5.26.2-r0 |
| alpine 3.21 | perl | 5.26.2-r0 |
| alpine 3.22 | perl | 5.26.2-r0 |
| alpine 3.23 | perl | 5.26.2-r0 |
| alpine 3.24 | perl | 5.26.2-r0 |
| alpine 3.5 | perl | 5.24.4-r0 |
| alpine 3.6 | perl | 5.24.4-r0 |
| alpine 3.7 | perl | 5.26.2-r0 |
| alpine 3.8 | perl | 5.26.2-r0 |
| alpine 3.9 | perl | 5.26.2-r0 |
| alpine edge | perl | 5.26.2-r0 |
| debian 11 | perl | 5.26.1-6 |
| debian 12 | perl | 5.26.1-6 |
| debian 13 | perl | 5.26.1-6 |
| debian 14 | perl | 5.26.1-6 |
| debian 7 | perl | kein Fix angegeben |
| debian 8 | perl | kein Fix angegeben |
| debian 9 | perl | 5.24.1-3+deb9u3 |
| echo | perl | 5.26.1-6 |
| root.io debian 11 | rootio-perl | 5.26.1-6 |
| root.io debian 12 | rootio-perl | 5.26.1-6 |
| ubuntu 16.04 | perl | 5.22.1-9ubuntu0.3 |
| ubuntu 16.04-ESM | perl | 5.22.1-9ubuntu0.3 |
| ubuntu 17.10 | perl | 5.26.0-8ubuntu1.1 |
Referenzen
- http://www.securitytracker.com/id/1040681
- http://www.securitytracker.com/id/1042004
- https://access.redhat.com/errata/RHSA-2018:1192
- https://access.redhat.com/security/cve/CVE-2018-6797
- https://nvd.nist.gov/vuln/detail/CVE-2018-6797
- https://rt.perl.org/Public/Bug/Display.html?id=132227
- https://security.gentoo.org/glsa/201909-01
- https://ubuntu.com/security/notices/USN-3625-1