Integer overflow in Perl - CVE-2018-18311

Vulnerability identifier: #VU16183

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-18311

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in Perl_my_setenv when processing malicious input. A remote unauthenticated attacker can supply specially crafted data, trigger heap-based buffer overflow and cause the service to crash or execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Perl
Debian Linux
Gentoo Linux
Amazon Linux AMI
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux EUS Compute Node
Red Hat Enterprise Linux for Power
Opensuse
Fedora
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Enterprise Manager Base Platform
perl (Alpine package)
perl
Oracle Communications Billing and Revenue Management
EMC ECS
Dell EMC Unity VSA Operating Environment (OE)
Dell EMC Unity XT Operating Environment (OE)
Dell EMC Unity Operating Environment (OE)

Update to version 5.28.1.

Perl - update to 5.28.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - addressed in versions 4.5.1, 4.8.0
perl (Alpine package) - update to 5.24.4-r2
EMC ECS - update to 3.5.0.1
Dell EMC Unity VSA Operating Environment (OE) - update to 5.0.2.0.5.009
Dell EMC Unity XT Operating Environment (OE) - update to 5.0.2.0.5.009
Dell EMC Unity Operating Environment (OE) - update to 5.0.2.0.5.009
perl - addressed in versions 5.26.3-415.fc28, 5.26-20181205105946.b88aa309, 5.26-20181205105946.0dec8aa7, 5.28.1-425.fc29

• https://rt.perl.org/Public/Bug/Display.html?id=133204

• Debian update for perl
• OpenSUSE Linux update for perl
• Red Hat update for perl
• Amazon Linux AMI update for perl
• Red Hat update for perl
• Red Hat update for perl
• Red Hat update for perl
• Red Hat update for perl
• Gentoo update for Perl
• Multiple vulnerabilities in Enterprise Manager Base Platform
• Integer overflow in perl (Alpine package)
• Integer overflow in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Multiple vulnerabilities in Dell EMC ECS
• Multiple vulnerabilities in Dell EMC Unity Family, Dell EMC Unity XT Family
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• Fedora 29 update for perl
• Fedora 28 update for perl
• Fedora 29 Modular update for perl
• Fedora 28 Modular update for perl
• Multiple vulnerabilities in Oracle Communications Billing and Revenue Management