Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240405-10
HistoryApr 05, 2024 - 12:00 a.m.

ROS-20240405-10

2024-04-0500:00:00
redos.red-soft.ru
10
vulnerability perl buffer overflow remote attacker denial of service arbitrary code unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability in the Perl programming language is related to a buffer overflow in dynamic memory.
Exploitation of the vulnerability could allow a remote attacker to cause a denial of service
or execute arbitrary code

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64perl<= 5.30.1-466UNKNOWN

Related

fedora 8
prion 1
openvas 14
nessus 15
alpinelinux 1
ubuntucve 2
nvd 1
redhatcve 2
redhat 5
veracode 1
mageia 1
oraclelinux 2
cve 1
cvelist 1
osv 4
almalinux 2
debiancve 1
f5 1
ubuntu 1
cloudfoundry 1
aix 1
ibm 3
hp 2
oracle 1
fedora
fedora
[SECURITY] Fedora 39 Update: perl-PAR-Packer-1.059-2.fc39
2023-12-06 01:40:44
[SECURITY] Fedora 38 Update: perl-PAR-Packer-1.057-4.fc38
2023-12-17 01:43:04
[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39
2023-12-06 01:40:44
prion
prion
Heap overflow
2023-12-18 14:15:00
openvas
openvas
Fedora: Security Advisory for perl-PAR-Packer (FEDORA-2023-9ef8a60a05)
2023-12-18 00:00:00
Fedora: Security Advisory for polymake (FEDORA-2023-c67f4dbf13)
2023-12-06 00:00:00
Fedora: Security Advisory for perl-Devel-Cover (FEDORA-2023-9ef8a60a05)
2023-12-18 00:00:00
nessus
nessus
RHEL 9 : perl (RHSA-2024:2228)
2024-04-30 00:00:00
Fedora 38 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2023-9ef8a60a05)
2023-12-16 00:00:00
Oracle Linux 8 : perl:5.32 (ELSA-2024-3128)
2024-05-28 00:00:00
alpinelinux
alpinelinux
CVE-2023-47038
2023-12-18 14:15:08
ubuntucve
ubuntucve
CVE-2023-47038
2023-11-25 00:00:00
CVE-2023-47100
2023-12-02 00:00:00
nvd
nvd
CVE-2023-47038
2023-12-18 14:15:08
redhatcve
redhatcve
CVE-2023-47038
2023-11-27 12:00:36
CVE-2023-47100
2023-12-21 05:00:32
redhat
redhat
(RHSA-2024:2228) Moderate: perl security update
2024-04-30 06:15:06
(RHSA-2024:3128) Moderate: perl:5.32 security update
2024-05-22 06:35:41
(RHSA-2024:3473) Moderate: OpenShift Virtualization 4.14.6 Images security update
2024-05-29 15:45:20
veracode
veracode
Heap-based Buffer Overflow
2023-11-28 01:45:44
mageia
mageia
Updated perl packages fix a security vulnerability
2024-02-04 05:49:27
oraclelinux
oraclelinux
perl security update
2024-05-02 00:00:00
perl:5.32 security update
2024-05-24 00:00:00
cve
cve
CVE-2023-47038
2023-12-18 14:15:08
cvelist
cvelist
CVE-2023-47038 Perl: write past buffer end via illegal user-defined unicode property
2023-12-18 13:43:07
osv
osv
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
CVE-2023-47038
2023-12-18 14:15:08
almalinux
almalinux
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
debiancve
debiancve
CVE-2023-47038
2023-12-18 14:15:08
f5
f5
K000138640 : Perl vulnerability CVE-2023-47038
2024-02-17 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2023-11-27 00:00:00
cloudfoundry
cloudfoundry
USN-6517-1: Perl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
aix
aix
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)
2024-02-21 15:59:59
ibm
ibm
Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)
2024-02-23 17:00:03
Security Bulletin: IBM Automation Decision Services - Multiple CVEs addressed (February 2024)
2024-03-11 09:56:22
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2024.
2024-03-01 19:45:05
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON
Related for ROS-20240405-10
fedora8prion1openvas14nessus15alpinelinux1ubuntucve2nvd1redhatcve2redhat5veracode1mageia1oraclelinux2cve1cvelist1osv4almalinux2debiancve1f51ubuntu1cloudfoundry1aix1ibm3hp2oracle1