Off-by-one in Perl - CVE-2023-47038
Published: November 27, 2023
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an off-by-one error when processing regular expressions. A remote attacker can trigger an off-by-one error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Gentoo Linux
Amazon Linux AMI
OpenBSD
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Anolis OS
Red Hat Enterprise Linux for IBM z Systems
Ubuntu
openEuler
Fedora
IBM AIX
Data Lakehouse
IBM Sterling Partner Engagement Manager
Red Hat OpenShift Dev Spaces
EasyApache
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Red Hat Migration Toolkit for Applications
IBM TXSeries for Multiplatforms
IBM Cloud Pak for Business Automation
IBM Automation Decision Services
IBM Observability with Instana
Voice Gateway
SmartFabric Storage Software
IBM VIOS
Robotic Process Automation for Cloud Pak
perl-Fedora-VSP
perl-overloading
perl-Config-Extensions
perl-less
perl-deprecate
perl-DBM_Filter
perl-Module-Loaded
perl-PerlIO-via-QuotedPrint
perl-Object-HashBase-tools
perl-Object-HashBase
perl-Text-Glob
perl-CPAN-DistnameInfo
perl-MRO-Compat
perl-encoding-warnings
perl-Term-Table
perl-CPAN-Meta-YAML
perl-I18N-Langinfo
perl-Locale-Maketext-Simple
perl-Hash-Util
perl-experimental
perl-Importer
perl-ExtUtils-Constant
perl-Config-Perl-V
perl-Sys-Syslog
perl-Module-Load
perl-Params-Check
perl-IO-Socket-IP
perl-Module-Build
perl-I18N-LangTags
perl-bignum
perl-if
perl-lib
perl-Class-Struct
perl-NEXT
perl-Module-Load-Conditional
perl-Unicode-UCD
perl-HTTP-Tiny
perl-Devel-Size
perl-Filter-Simple
perl-version
perl-Data-OptList
perl-File-Temp
perl-parent
perl-inc-latest
perl-Math-BigInt-FastCalc
perl-Sub-Install
perl-Sub-Exporter
perl-Math-BigRat
perl-Software-License
perl-Data-Section
perl-ExtUtils-CBuilder
perl-File-Fetch
perl-Tie-Memoize
perl-Attribute-Handlers
perl-I18N-Collate
perl-SelectSaver
perl-Text-Abbrev
perl-Net
perl-Memoize
perl-User-pwent
perl-Time
perl-filetest
perl-subs
perl-IPC-Cmd
perl-File-HomeDir
perl-vmsish
perl-Env
perl-Encode-Locale
perl-DirHandle
perl-vars
perl-Tie-File
perl-Devel-SelfStubber
perl-blib
perl-Search-Dict
perl-Pod-Escapes
perl-Symbol
perl-locale
perl-ExtUtils-Miniperl
perl-sigtrap
perl-File-stat
perl-FileCache
perl-Perl-OSType
perl-IO-Zlib
perl-autouse
perl-English
perl-File-DosGlob
perl-open
perl-Getopt-Std
perl-generators
perl-Fcntl
perl-Pod-Functions
perl-NDBM_File
perl-ODBM_File
perl-Term-ReadLine
perl-Term-Cap
perl-GDBM_File
perl-Digest
perl-Hash-Util-FieldHash
perl-IPC-Open3
perl-File-Which
perl-Benchmark
perl-Sys-Hostname
perl-mro
perl-Pod-Html
perl-SelfLoader
perl-Unicode-Normalize
perl-Devel-Peek
perl-Unicode-Collate
perl-Locale-Maketext
perl-IPC-System-Simple
perl-Errno
perl-Test
perl-overload
perl-constant
perl-ExtUtils-Embed
perl-Module-Metadata
perl-diagnostics
perl-File-Find
perl-Tie-RefHash
perl-IO
perl-Text-Diff
perl-DynaLoader
perl-Opcode
perl-Carp
perl-FindBin
perl-Scalar-List-Utils
perl-debugger
perl-Text-Template
perl-Math-Complex
perl-Filter
perl-threads-shared
perl-Pod-Parser
perl-Archive-Zip
perl-ExtUtils-Manifest
perl-Pod-Checker
perl-URI
perl-B
perl-POSIX
perl-File-Compare
perl-Params-Util
perl-Package-Generator
perl-Time-Local
perl-Term-Complete
perl-DB_File
perl-Algorithm-Diff
perl-Time-Piece
perl-Time-HiRes
perl-Math-BigInt
perl-Test-Simple
perl-Pod-Usage
perl-FileHandle
perl-Text-Balanced
perl-sort
perl-IPC-SysV
perl-Thread-Semaphore
perl-File-Path
perl-ExtUtils-Install
perl-local-lib
perl-homedir
perl-threads
perl-Dumpvalue
perl-base
perl-fields
perl-Compress-Bzip2
perl-CPAN
perl-Socket
perl-autodie
perl-File-Copy
perl-Archive-Tar
perl-Safe
perl-Getopt-Long
perl-Digest-MD5
perl-Net-Ping
perl-File-Basename
perl-IO-Compress-Lzma
perl-IO-Compress
perl-Compress-Raw-Bzip2
perl-Compress-Raw-Lzma
perl-Compress-Raw-Zlib
perl-CPAN-Meta-Requirements
perl-Data-Dumper
perl-CPAN-Meta
perl-encoding
perl-Thread
perl-Encode-devel
perl-Encode
perl-libnet
perl-Thread-Queue
perl-MIME-Base64
perl-Storable
perl-Pod-Perldoc
perl-Text-ParseWords
perl-ExtUtils-ParseXS
perl-Pod-Simple
perl-Test-Harness
perl-Devel-PPPort
perl-PathTools
perl-JSON-PP
perl-Tie
perl-podlators
perl-Term-ANSIColor
perl (Ubuntu package)
perl-ph
perl-utils
perl-doc
perl-libnetcfg
perl-macros
perl
perl-meta-notation
perl-devel
perl-interpreter
perl-libs
perl (Red Hat package)
perl-debugsource
perl-help
perl-debuginfo
perl-tests
dev-lang/perl
perl-AutoSplit
perl-AutoLoader
perl-Exporter
perl-perlfaq
perl-Module-CoreList-tools
perl-Module-CoreList
perl-Digest-SHA
perl-ExtUtils-Command
perl-ExtUtils-MakeMaker
perl-ExtUtils-MM-Utils
perl-Text-Tabs+Wrap
OpenShift Service Mesh
Multicluster Engine for Kubernetes
OpenShift Virtualization
Red Hat OpenShift Container Platform
How to mitigate CVE-2023-47038
Data Lakehouse - update to 1.1.0.0
Voice Gateway - update to 1.0.8.12
SmartFabric Storage Software - update to 1.4.3
IBM Sterling Partner Engagement Manager - addressed in versions 6.2.3.6, 6.2.4.4
Robotic Process Automation for Cloud Pak - addressed in versions 23.0.20.5, 30.0.1
perl-Fedora-VSP - update to 0.001-10
perl-overloading - addressed in versions 0.02-15, 0.02-473
perl-Config-Extensions - addressed in versions 0.03-15, 0.03-473
perl-less - addressed in versions 0.03-15, 0.03-473
perl-deprecate - addressed in versions 0.04-15, 0.04-473
perl-DBM_Filter - addressed in versions 0.06-15, 0.06-473
perl-Module-Loaded - addressed in versions 0.08-15, 0.08-473
perl-PerlIO-via-QuotedPrint - update to 0.09-1
perl-Object-HashBase-tools - update to 0.009-4
perl-Object-HashBase - update to 0.009-4
perl-Text-Glob - update to 0.11-5
perl-CPAN-DistnameInfo - update to 0.12-13
perl-MRO-Compat - update to 0.13-5
perl-encoding-warnings - addressed in versions 0.13-15, 0.13-473
perl-Term-Table - update to 0.015-2
perl-CPAN-Meta-YAML - update to 0.018-1001
perl-I18N-Langinfo - addressed in versions 0.19-473, 0.21-15
perl-Locale-Maketext-Simple - addressed in versions 0.21-15, 0.21-473
perl-Hash-Util - addressed in versions 0.23-473, 0.28-15
perl-experimental - update to 0.025-1
perl-Importer - update to 0.025-6
perl-ExtUtils-Constant - addressed in versions 0.25-15, 0.25-473
perl-Config-Perl-V - update to 0.32-441
perl-Sys-Syslog - update to 0.36-1
perl-Module-Load - update to 0.36-1
perl-Params-Check - update to 0.38-396
perl-IO-Socket-IP - update to 0.41-2
perl-Module-Build - update to 0.42.31-5
perl-I18N-LangTags - addressed in versions 0.44-473, 0.45-15
perl-bignum - update to 0.51-439
perl-if - addressed in versions 0.60.800-473, 0.61.000-15
perl-lib - addressed in versions 0.65-15, 0.65-473
perl-Class-Struct - addressed in versions 0.66-15, 0.66-473
perl-NEXT - addressed in versions 0.67-473, 0.69-15
perl-Module-Load-Conditional - update to 0.74-1
perl-Unicode-UCD - addressed in versions 0.75-473, 0.78-15
perl-HTTP-Tiny - update to 0.078-1
perl-Devel-Size - update to 0.83-3
perl-Filter-Simple - update to 0.96-457
perl-version - update to 0.99.29-1
perl-Data-OptList - update to 0.110-7
perl-File-Temp - update to 0.231.100-1
perl-parent - update to 0.238-457
perl-inc-latest - update to 0.500-10
perl-Math-BigInt-FastCalc - update to 0.500.900-1
perl-Sub-Install - update to 0.928-15
perl-Sub-Exporter - update to 0.987-17
perl-Math-BigRat - update to 0.2614-2
perl-Software-License - update to 0.103014-5
perl-Data-Section - update to 0.200007-8
perl-ExtUtils-CBuilder - update to 0.280236-1
perl-File-Fetch - update to 1.00-1
perl-Tie-Memoize - addressed in versions 1.1-15, 1.1-473
perl-Attribute-Handlers - addressed in versions 1.01-473, 1.02-15
perl-I18N-Collate - addressed in versions 1.02-15, 1.02-473
perl-SelectSaver - addressed in versions 1.02-15, 1.02-473
perl-Text-Abbrev - addressed in versions 1.02-15, 1.02-473
perl-Net - addressed in versions 1.02-473, 1.03-15
perl-Memoize - addressed in versions 1.03-15, 1.03-473
perl-User-pwent - addressed in versions 1.03-15, 1.03-473
perl-Time - addressed in versions 1.03-15, 1.03-473
perl-filetest - addressed in versions 1.03-15, 1.03-473
perl-subs - addressed in versions 1.03-473, 1.04-15
perl-IPC-Cmd - update to 1.04-2
perl-File-HomeDir - update to 1.004-6
perl-vmsish - addressed in versions 1.04-15, 1.04-473
perl-Env - update to 1.04-396
perl-Encode-Locale - update to 1.05-10
perl-DirHandle - addressed in versions 1.05-15, 1.05-473
perl-vars - addressed in versions 1.05-15, 1.05-473
perl-Tie-File - addressed in versions 1.06-15, 1.06-473
perl-Devel-SelfStubber - addressed in versions 1.06-15, 1.06-473
perl-blib - addressed in versions 1.07-15, 1.07-473
perl-Search-Dict - addressed in versions 1.07-15, 1.07-473
perl-Pod-Escapes - update to 1.07-396
perl-Symbol - addressed in versions 1.08-473, 1.09-15
perl-locale - addressed in versions 1.09-473, 1.10-15
perl-ExtUtils-Miniperl - addressed in versions 1.09-473, 1.11-15
perl-sigtrap - addressed in versions 1.09-473, 1.10-15
perl-File-stat - addressed in versions 1.09-473, 1.12-15
perl-FileCache - addressed in versions 1.10-15, 1.10-473
perl-Perl-OSType - update to 1.010-397
perl-IO-Zlib - update to 1.10-473
perl-autouse - addressed in versions 1.11-15, 1.11-473
perl-English - addressed in versions 1.11-15, 1.11-473
perl-File-DosGlob - addressed in versions 1.12-15, 1.12-473
perl-open - addressed in versions 1.12-473, 1.13-15
perl-Getopt-Std - addressed in versions 1.12-473, 1.13-15
perl-generators - update to 1.13-1
perl-Fcntl - addressed in versions 1.13-473, 1.15-15
perl-Pod-Functions - addressed in versions 1.13-473, 1.14-15
perl-NDBM_File - addressed in versions 1.15-15, 1.15-473
perl-ODBM_File - addressed in versions 1.16-473, 1.17-15
perl-Term-ReadLine - addressed in versions 1.17-15, 1.17-473
perl-Term-Cap - update to 1.17-396
perl-GDBM_File - addressed in versions 1.18-473, 1.23-15
perl-Digest - update to 1.20-1
perl-Hash-Util-FieldHash - addressed in versions 1.20-473, 1.26-15
perl-IPC-Open3 - addressed in versions 1.21-473, 1.22-15
perl-File-Which - update to 1.23-4
perl-Benchmark - addressed in versions 1.23-15, 1.23-473
perl-Sys-Hostname - addressed in versions 1.23-473, 1.24-15
perl-mro - addressed in versions 1.23-473, 1.26-15
perl-Pod-Html - addressed in versions 1.25-473, 1.33-15
perl-SelfLoader - addressed in versions 1.26-15, 1.26-473
perl-Unicode-Normalize - update to 1.27-458
perl-Devel-Peek - addressed in versions 1.28-473, 1.32-15
perl-Unicode-Collate - update to 1.29-1
perl-Locale-Maketext - update to 1.29-440
perl-IPC-System-Simple - update to 1.30-3
perl-Errno - addressed in versions 1.30-473, 1.36-15
perl-Test - addressed in versions 1.31-15, 1.31-473
perl-overload - addressed in versions 1.31-473, 1.35-15
perl-constant - update to 1.33-1001
perl-ExtUtils-Embed - addressed in versions 1.35-15, 1.35-473
perl-Module-Metadata - update to 1.000037-1
perl-diagnostics - addressed in versions 1.37-473, 1.39-15
perl-File-Find - addressed in versions 1.37-473, 1.40-15
perl-Tie-RefHash - update to 1.39-473
perl-IO - addressed in versions 1.43-473, 1.50-15
perl-Text-Diff - update to 1.45-7
perl-DynaLoader - addressed in versions 1.47-473, 1.52-15
perl-Opcode - addressed in versions 1.48-473, 1.57-15
perl-Carp - update to 1.50-439
perl-FindBin - addressed in versions 1.51-473, 1.53-15
perl-Scalar-List-Utils - update to 1.55-457
perl-debugger - addressed in versions 1.56-473, 1.60-15
perl-Text-Template - update to 1.58-1
perl-Math-Complex - addressed in versions 1.59-15, 1.59-473
perl-Filter - update to 1.60-1
perl-threads-shared - update to 1.61-457
perl-Pod-Parser - update to 1.63-1001
perl-Archive-Zip - update to 1.68-3
perl-ExtUtils-Manifest - update to 1.73-1
perl-Pod-Checker - update to 1.74-1
perl-URI - update to 1.76-5
perl-B - addressed in versions 1.80-473, 1.83-15
perl-POSIX - addressed in versions 1.94-473, 2.03-15
perl-File-Compare - addressed in versions 1.100.600-473, 1.100.700-15
perl-Params-Util - update to 1.102-2
perl-Package-Generator - update to 1.106-12
perl-Time-Local - update to 1.300-4
perl-Term-Complete - addressed in versions 1.403-15, 1.403-473
perl-DB_File - update to 1.855-1
perl-Algorithm-Diff - update to 1.1903-10
perl-Time-Piece - addressed in versions 1.3401-15, 1.3401-473
perl-Time-HiRes - update to 1.9764-459
perl-Math-BigInt - update to 1.9998.18-1
perl-Test-Simple - update to 1.302181-2
perl-Pod-Usage - update to 2.01-1
perl-FileHandle - addressed in versions 2.03-15, 2.03-473
perl-Text-Balanced - update to 2.04-1
perl-sort - addressed in versions 2.04-473, 2.05-15
OpenShift Service Mesh - update to 2.5.2
Multicluster Engine for Kubernetes - update to 2.5.8
perl-IPC-SysV - update to 2.09-1
perl-Thread-Semaphore - addressed in versions 2.13-15, 2.13-473
perl-File-Path - update to 2.16-439
perl-ExtUtils-Install - update to 2.20-1
perl-local-lib - update to 2.000024-7
perl-homedir - update to 2.000024-7
perl-threads - update to 2.25-457
perl-Dumpvalue - addressed in versions 2.27-15, 2.27-473
perl-base - addressed in versions 2.27-15, 2.27-473
perl-fields - addressed in versions 2.27-15, 2.27-473
perl-Compress-Bzip2 - update to 2.28-2
perl-CPAN - update to 2.28-5
perl-Socket - update to 2.031-1
perl-autodie - update to 2.34-1
perl-File-Copy - addressed in versions 2.34-473, 2.39-15
perl-Archive-Tar - update to 2.38-3
perl-Safe - addressed in versions 2.41-473, 2.43-15
perl-Getopt-Long - update to 2.52-1
perl-Digest-MD5 - update to 2.58-1
perl-Net-Ping - update to 2.72-473
perl-File-Basename - addressed in versions 2.85-15, 2.85-473
perl-IO-Compress-Lzma - update to 2.096-1
perl-IO-Compress - update to 2.096-1
perl-Compress-Raw-Bzip2 - update to 2.096-1
perl-Compress-Raw-Lzma - update to 2.096-1.0.1
perl-Compress-Raw-Zlib - update to 2.096-2
perl-CPAN-Meta-Requirements - update to 2.140-397
perl-Data-Dumper - update to 2.174-440
perl-CPAN-Meta - update to 2.150010-397
perl-encoding - update to 3.00-461
perl-Thread - addressed in versions 3.05-15, 3.05-473
perl-Encode-devel - update to 3.08-461
perl-Encode - update to 3.08-461
perl-libnet - update to 3.13-1
perl-Thread-Queue - update to 3.14-457
perl-MIME-Base64 - update to 3.15-1001
Red Hat OpenShift Dev Spaces - addressed in versions 3.16.0, 3.17.0
perl-Storable - update to 3.21-457
perl-Pod-Perldoc - update to 3.28.01-443
perl-Text-ParseWords - update to 3.30-396
perl-ExtUtils-ParseXS - update to 3.40-439
perl-Pod-Simple - update to 3.42-1
perl-Test-Harness - update to 3.42-2
perl-Devel-PPPort - update to 3.62-1
perl-PathTools - update to 3.78-439
perl-JSON-PP - update to 4.04-2
perl-Tie - addressed in versions 4.6-15, 4.6-473
OpenShift Virtualization - update to 4.14.6
perl-podlators - update to 4.14-457
Red Hat OpenShift Container Platform - addressed in versions 4.16.15, 4.17.0
EasyApache - update to 4 2023-11-30
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.0
perl-Term-ANSIColor - update to 5.01-458
perl (Ubuntu package) - addressed in versions 5.30.0-9ubuntu0.5, 5.34.0-3ubuntu1.3, 5.36.0-7ubuntu0.23.04.2, 5.36.0-9ubuntu1.1
perl-ph - addressed in versions 5.32.1-473, 5.36.3-15
perl-utils - addressed in versions 5.32.1-473, 5.36.3-15
perl-doc - addressed in versions 5.32.1-473, 5.36.3-15
perl-libnetcfg - addressed in versions 5.32.1-473, 5.36.3-15
perl-macros - addressed in versions 5.32.1-473, 5.36.3-15
perl - addressed in versions 5.32.1-473, 5.36.3-15
perl-meta-notation - addressed in versions 5.32.1-473, 5.36.3-15
perl-devel - addressed in versions 5.32.1-473, 5.36.3-15
perl-interpreter - addressed in versions 5.32.1-473, 5.36.3-15
perl-libs - addressed in versions 5.32.1-473, 5.36.3-15
perl - update to 5.32.1-477
perl (Red Hat package) - update to 5.32.1-481.el9
perl-devel - addressed in versions 5.34.0-10, 5.34.0-11
perl-debugsource - addressed in versions 5.34.0-10, 5.34.0-11
perl-help - addressed in versions 5.34.0-10, 5.34.0-11
perl - addressed in versions 5.34.0-10, 5.34.0-11
perl-debuginfo - addressed in versions 5.34.0-10, 5.34.0-11
perl-libs - addressed in versions 5.34.0-10, 5.34.0-11
perl-tests - update to 5.36.3-15
perl - addressed in versions 5.36.3-498.fc38, 5.38.2-502.fc39
dev-lang/perl - update to 5.38.2
perl-AutoSplit - addressed in versions 5.74-15, 5.74-473
perl-AutoLoader - addressed in versions 5.74-15, 5.74-473
perl-Exporter - update to 5.74-458
perl-perlfaq - update to 5.20210520-1
perl-Module-CoreList-tools - update to 5.20211020-1
perl-Module-CoreList - update to 5.20211020-1
perl-Digest-SHA - update to 6.02-2
Red Hat Migration Toolkit for Applications - addressed in versions 6.2.3, 7.0.3
IBM AIX - addressed in versions 7.3.1, 7.3.1.2
perl-ExtUtils-Command - update to 7.46-3
perl-ExtUtils-MakeMaker - update to 7.46-3
perl-ExtUtils-MM-Utils - update to 7.46-3
IBM TXSeries for Multiplatforms - update to 11.1.0.0 ifix18
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.30, 23.0.2.2
IBM Automation Decision Services - update to 23.0.2.0.2
IBM Observability with Instana - update to 277
perl-Text-Tabs+Wrap - update to 2013.0523-396
External References
Related Security Bulletins
- Multiple vulnerabilities in Perl
- Ubuntu update for perl
- OpenBSD update for Perl
- Fedora 38 update for perl
- Fedora 39 update for perl
- Multiple vulnerabilities in cPanel EasyApache
- Multiple vulnerabilities in IBM Cloud Pak for Business Automation
- Multiple vulnerabilities in IBM Automation Decision Services
- openEuler 22.03 LTS SP1 update for perl
- openEuler 22.03 LTS SP2 update for perl
- openEuler 22.03 LTS update for perl
- Red Hat Enterprise Linux 9 update for perl
- Multiple vulnerabilities in IBM AIX and VIOS
- Red Hat Enterprise Linux 8 update for the perl:5.32 module
- Multiple vulnerabilities in OpenShift Virtualization 4.14
- Multiple vulnerabilities in OpenShift Service Mesh 2.5
- Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 6.2
- Multiple vulnerabilities in Dell Data Lakehouse System Software
- Multiple vulnerabilities in IBM Observability with Instana
- Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.16
- IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for Perl
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
- Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
- Gentoo update for Perl
- Multiple vulnerabilities in Red Hat OpenShift Dev Spaces 3.17
- Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.5
- Amazon Linux AMI update for perl
- Anolis OS update for perl
- Anolis OS update for perl:5.32 module
- Dell SmartFabric Storage Software update for third-party components
- Multiple vulnerabilities in IBM Voice Gateway
- Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
- Multiple vulnerabilities in IBM TXSeries for Multiplatforms
- Multiple vulnerabilities in IBM Sterling Partner Engagement Manager
- Multiple vulnerabilities in Red Hat Migration Toolkit for Applications 7.0