Lucene search

MitreCVE-2020-12723

HistoryJun 05, 2020 - 3:15 p.m.

CVE-2020-12723

2020-06-0515:15:10

CWE-120

mitre

web.nvd.nist.gov

382

cve-2020-12723

perl

regcomp.c

buffer overflow

nvd

security advisory

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

61.7%

JSON

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Affected configurations

Nvd

Node

perlperlRange<5.30.3

Node

netapponcommand_workflow_automationMatch-

netappsnap_creator_frameworkMatch-

Node

fedoraprojectfedoraMatch31

Node

opensuseleapMatch15.1

Node

oraclecommunications_billing_and_revenue_managementMatch12.0.0.2.0

oraclecommunications_billing_and_revenue_managementMatch12.0.0.3.0

oraclecommunications_diameter_signaling_routerRange8.0.0–8.5.0

oraclecommunications_eagle_application_processorRange16.1.0–16.4.0

oraclecommunications_eagle_lnp_application_processorMatch10.1

oraclecommunications_eagle_lnp_application_processorMatch10.2

oraclecommunications_lsmsRange13.1–13.4

oraclecommunications_offline_mediation_controllerMatch12.0.0.3.0

oraclecommunications_performance_intelligence_centerRange10.3.0.0.0–10.3.0.2.1

oraclecommunications_performance_intelligence_centerRange10.4.0.1.0–10.4.0.3.1

oracleconfiguration_managerMatch12.1.2.0.8

oracleenterprise_manager_base_platformMatch13.4.0.0

oraclesd-wan_edgeMatch8.2

oraclesd-wan_edgeMatch9.0

oraclesd-wan_edgeMatch9.1

oracletekelec_platform_distributionRange7.4.0–7.7.1

VendorProductVersionCPE
perlperl*cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*
netapponcommand_workflow_automation-cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
netappsnap_creator_framework-cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
fedoraprojectfedora31cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
opensuseleap15.1cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
oraclecommunications_billing_and_revenue_management12.0.0.2.0cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.2.0:*:*:*:*:*:*:*
oraclecommunications_billing_and_revenue_management12.0.0.3.0cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
oraclecommunications_diameter_signaling_router*cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
oraclecommunications_eagle_application_processor*cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*
oraclecommunications_eagle_lnp_application_processor10.1cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
perl	perl	*	cpe:2.3:a:perl:perl::::::::
netapp	oncommand_workflow_automation	-	cpe:2.3:a:netapp:oncommand_workflow_automation:-:::::::*
netapp	snap_creator_framework	-	cpe:2.3:a:netapp:snap_creator_framework:-:::::::*
fedoraproject	fedora	31	cpe:2.3:o:fedoraproject:fedora:31:::::::*
opensuse	leap	15.1	cpe:2.3:o:opensuse:leap:15.1:::::::*
oracle	communications_billing_and_revenue_management	12.0.0.2.0	cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.2.0:::::::*
oracle	communications_billing_and_revenue_management	12.0.0.3.0	cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:::::::*
oracle	communications_diameter_signaling_router	*	cpe:2.3:a:oracle:communications_diameter_signaling_router::::::::
oracle	communications_eagle_application_processor	*	cpe:2.3:a:oracle:communications_eagle_application_processor::::::::
oracle	communications_eagle_lnp_application_processor	10.1	cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:::::::*