Lucene search

K
redhatcveRedhat.comRH:CVE-2020-10878
HistoryJun 06, 2020 - 1:56 a.m.

CVE-2020-10878

2020-06-0601:56:30
redhat.com
access.redhat.com
28

EPSS

0.003

Percentile

68.6%

Perl before 5.30.3 has an integer overflow related to mishandling of a “PL_regkind[OP(n)] == NOTHING” situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Mitigation

To mitigate this flaw, developers should not allow untrusted regular expressions to be compiled by the Perl regular expression compiler.