#VU16184 Out-of-bounds write in Perl - CVE-2018-18312

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU16184

#VU16184 Out-of-bounds write in Perl - CVE-2018-18312

Published: November 30, 2018 / Updated: December 4, 2018


Vulnerability identifier: #VU16184
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2018-18312
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
Perl
Software vendor:
Perl

Description

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code on the target system.

The vulnerability exists due to heap-based buffer overflow write during compilation. A remote unauthenticated attacker can supply specially crafted regular expression, trigger memory corruption and cause the service to crash or execute arbitrary code with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.


Remediation

Update to version 5.28.1.

External links