Lucene search
Ubuntu.comUB:CVE-2022-48522HistoryAug 22, 2023 - 12:00 a.m.
CVE-2022-48522
2023-08-2200:00:00
ubuntu.com
ubuntu.com
11
perl security vulnerability stack-based remote code execution local privilege escalation
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.8%
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash
that can lead to remote code execution or local privilege escalation.
Bugs
- <https://github.com/Perl/perl5/issues/19147>
- <https://bugs.launchpad.net/ubuntu/+source/perl/+bug/2032667>
Notes
| Author | Note |
|---|---|
| Priority reason: infinite recursion when printing a warning, negligible security impact | |
| mdeslaur | This is just an infinite recursion when trying to print a warning message causing the process to run out of stack space, this has a negligible security impact |
Related
openvas
openvas
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3040)
2023-10-31 00:00:00
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3383)
2023-12-14 00:00:00
Huawei EulerOS: Security Advisory for perl (EulerOS-SA-2023-3365)
2023-12-14 00:00:00
prion
prion
Stack overflow
2023-08-22 19:16:00
nessus
nessus
EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-3017)
2024-01-16 00:00:00
EulerOS 2.0 SP11 : perl (EulerOS-SA-2023-3040)
2024-01-16 00:00:00
EulerOS Virtualization 2.11.1 : perl (EulerOS-SA-2023-3365)
2024-01-16 00:00:00
debiancve
debiancve
CVE-2022-48522
2023-08-22 19:16:31
redhatcve
redhatcve
CVE-2022-48522
2023-08-24 13:46:39
alpinelinux
alpinelinux
CVE-2022-48522
2023-08-22 19:16:00
cvelist
cvelist
CVE-2022-48522
2023-08-22 00:00:00
veracode
veracode
Privilege Escalation
2023-08-30 22:22:22
nvd
nvd
CVE-2022-48522
2023-08-22 19:16:31
osv
osv
CVE-2022-48522
2023-08-22 19:16:31
perl vulnerabilities
2023-11-27 14:15:35
cve
cve
CVE-2022-48522
2023-08-22 19:16:31
cloudfoundry
cloudfoundry
USN-6517-1: Perl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2023-11-27 00:00:00
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.8%
Related for UB:CVE-2022-48522