CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
Percentile
86.2%
Perl is a stable, cross platform programming language.
Tavis Ormandy and Will Drewry of the Google Security Team have reported a double free vulnerability when processing a crafted regular expression containing UTF-8 characters.
A remote attacker could possibly exploit this vulnerability to execute arbitrary code or cause a Denial of Service.
There is no known workaround at this time.
All Perl users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-lang/perl-5.8.8-r5"
All libperl users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=sys-devel/libperl-5.8.8-r2"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | dev-lang/perl | <Β 5.8.8-r5 | UNKNOWN |
Gentoo | any | all | sys-devel/libperl | <Β 5.8.8-r2 | UNKNOWN |