CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
61.7%
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted
regular expression because of recursive S_study_chunk calls.
An application written in Perl would only be vulnerable to this flaw if
it evaluates regular expressions supplied by the attacker. Evaluating
regular expressions in this fashion is known to be dangerous since the
regular expression engine does not protect against denial of service
attacks in this usage scenario.]
Author | Note |
---|---|
alexmurray | Affects 5.10.0 to 5.30.2 |
launchpad.net/bugs/cve/CVE-2020-12723
metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod
metacpan.org/pod/release/XSAWYERX/perl-5.30.3/pod/perldelta.pod
nvd.nist.gov/vuln/detail/CVE-2020-12723
security-tracker.debian.org/tracker/CVE-2020-12723
ubuntu.com/security/notices/USN-4602-1
ubuntu.com/security/notices/USN-4602-2
www.cve.org/CVERecord?id=CVE-2020-12723
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
Percentile
61.7%