CVE-2018-6797
perl: heap write overflow in regcomp.c
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Photon OS. Daha düşük diyenler: Red Hat (orta), Ubuntu (orta).
Açıklama
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | perl | 5.24.1-1.ph1 |
| Photon OS 2.0 | perl | 5.24.1-5.ph2 |
| alpine 3.10 | perl | 5.26.2-r0 |
| alpine 3.11 | perl | 5.26.2-r0 |
| alpine 3.12 | perl | 5.26.2-r0 |
| alpine 3.13 | perl | 5.26.2-r0 |
| alpine 3.14 | perl | 5.26.2-r0 |
| alpine 3.15 | perl | 5.26.2-r0 |
| alpine 3.16 | perl | 5.26.2-r0 |
| alpine 3.17 | perl | 5.26.2-r0 |
| alpine 3.18 | perl | 5.26.2-r0 |
| alpine 3.19 | perl | 5.26.2-r0 |
36 kaynaktaki 36 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| Photon OS 1.0 | perl | 5.24.1-1.ph1 |
| Photon OS 2.0 | perl | 5.24.1-5.ph2 |
| alpine 3.10 | perl | 5.26.2-r0 |
| alpine 3.11 | perl | 5.26.2-r0 |
| alpine 3.12 | perl | 5.26.2-r0 |
| alpine 3.13 | perl | 5.26.2-r0 |
| alpine 3.14 | perl | 5.26.2-r0 |
| alpine 3.15 | perl | 5.26.2-r0 |
| alpine 3.16 | perl | 5.26.2-r0 |
| alpine 3.17 | perl | 5.26.2-r0 |
| alpine 3.18 | perl | 5.26.2-r0 |
| alpine 3.19 | perl | 5.26.2-r0 |
| alpine 3.20 | perl | 5.26.2-r0 |
| alpine 3.21 | perl | 5.26.2-r0 |
| alpine 3.22 | perl | 5.26.2-r0 |
| alpine 3.23 | perl | 5.26.2-r0 |
| alpine 3.24 | perl | 5.26.2-r0 |
| alpine 3.5 | perl | 5.24.4-r0 |
| alpine 3.6 | perl | 5.24.4-r0 |
| alpine 3.7 | perl | 5.26.2-r0 |
| alpine 3.8 | perl | 5.26.2-r0 |
| alpine 3.9 | perl | 5.26.2-r0 |
| alpine edge | perl | 5.26.2-r0 |
| debian 11 | perl | 5.26.1-6 |
| debian 12 | perl | 5.26.1-6 |
| debian 13 | perl | 5.26.1-6 |
| debian 14 | perl | 5.26.1-6 |
| debian 7 | perl | düzeltme belirtilmemiş |
| debian 8 | perl | düzeltme belirtilmemiş |
| debian 9 | perl | 5.24.1-3+deb9u3 |
| echo | perl | 5.26.1-6 |
| root.io debian 11 | rootio-perl | 5.26.1-6 |
| root.io debian 12 | rootio-perl | 5.26.1-6 |
| ubuntu 16.04 | perl | 5.22.1-9ubuntu0.3 |
| ubuntu 16.04-ESM | perl | 5.22.1-9ubuntu0.3 |
| ubuntu 17.10 | perl | 5.26.0-8ubuntu1.1 |
Referanslar
- http://www.securitytracker.com/id/1040681
- http://www.securitytracker.com/id/1042004
- https://access.redhat.com/errata/RHSA-2018:1192
- https://access.redhat.com/security/cve/CVE-2018-6797
- https://nvd.nist.gov/vuln/detail/CVE-2018-6797
- https://rt.perl.org/Public/Bug/Display.html?id=132227
- https://security.gentoo.org/glsa/201909-01
- https://ubuntu.com/security/notices/USN-3625-1