Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2023-47038
HistoryDec 18, 2023 - 2:15 p.m.

CVE-2023-47038

2023-12-1814:15:08
Google
osv.dev
14
vulnerability
buffer overflow
heap allocation
perl

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON

A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.

Related

fedora 8
osv 4
cvelist 1
redhat 9
nessus 15
almalinux 2
debiancve 1
openvas 14
ubuntucve 2
prion 1
alpinelinux 1
veracode 1
oraclelinux 2
mageia 1
cve 1
redos 1
nvd 1
redhatcve 2
f5 1
cloudfoundry 1
ubuntu 1
ibm 6
aix 1
hp 2
oracle 1
fedora
fedora
[SECURITY] Fedora 38 Update: polymake-4.10-2.fc38
2023-12-17 01:43:04
[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39
2023-12-06 01:40:44
[SECURITY] Fedora 38 Update: perl-PAR-Packer-1.057-4.fc38
2023-12-17 01:43:04
osv
osv
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
perl-32bit-5.38.2-1.1 on GA media
2024-06-15 00:00:00
cvelist
cvelist
CVE-2023-47038 Perl: write past buffer end via illegal user-defined unicode property
2023-12-18 13:43:07
redhat
redhat
(RHSA-2024:3128) Moderate: perl:5.32 security update
2024-05-22 06:35:41
(RHSA-2024:2228) Moderate: perl security update
2024-04-30 06:15:06
(RHSA-2024:3473) Moderate: OpenShift Virtualization 4.14.6 Images security update
2024-05-29 15:45:20
nessus
nessus
RHEL 8 : 5.30_perl (Unpatched Vulnerability)
2024-06-03 00:00:00
Oracle Linux 9 : perl (ELSA-2024-2228)
2024-05-06 00:00:00
Fedora 38 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2023-9ef8a60a05)
2023-12-16 00:00:00
almalinux
almalinux
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
debiancve
debiancve
CVE-2023-47038
2023-12-18 14:15:08
openvas
openvas
Fedora: Security Advisory for perl-PAR-Packer (FEDORA-2023-9ef8a60a05)
2023-12-18 00:00:00
Fedora: Security Advisory for polymake (FEDORA-2023-c67f4dbf13)
2023-12-06 00:00:00
Fedora: Security Advisory for perl (FEDORA-2023-c67f4dbf13)
2023-12-06 00:00:00
ubuntucve
ubuntucve
CVE-2023-47038
2023-11-25 00:00:00
CVE-2023-47100
2023-12-02 00:00:00
prion
prion
Heap overflow
2023-12-18 14:15:00
alpinelinux
alpinelinux
CVE-2023-47038
2023-12-18 14:15:08
veracode
veracode
Heap-based Buffer Overflow
2023-11-28 01:45:44
oraclelinux
oraclelinux
perl security update
2024-05-02 00:00:00
perl:5.32 security update
2024-05-24 00:00:00
mageia
mageia
Updated perl packages fix a security vulnerability
2024-02-04 05:49:27
cve
cve
CVE-2023-47038
2023-12-18 14:15:08
redos
redos
ROS-20240405-10
2024-04-05 00:00:00
nvd
nvd
CVE-2023-47038
2023-12-18 14:15:08
redhatcve
redhatcve
CVE-2023-47038
2023-11-27 12:00:36
CVE-2023-47100
2023-12-21 05:00:32
f5
f5
K000138640 : Perl vulnerability CVE-2023-47038
2024-02-17 00:00:00
cloudfoundry
cloudfoundry
USN-6517-1: Perl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2023-11-27 00:00:00
ibm
ibm
Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)
2024-02-23 16:53:01
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
2024-07-18 11:16:35
Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)
2024-07-12 14:44:46
aix
aix
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)
2024-02-21 15:59:59
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.6

Confidence

High

EPSS

0

Percentile

5.1%

JSON
Related for OSV:CVE-2023-47038
fedora8osv4cvelist1redhat9nessus15almalinux2debiancve1openvas14ubuntucve2prion1alpinelinux1veracode1oraclelinux2mageia1cve1redos1nvd1redhatcve2f51cloudfoundry1ubuntu1ibm6aix1hp2oracle1