Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:44401
HistoryNov 28, 2023 - 1:45 a.m.

Heap-based Buffer Overflow

2023-11-2801:45:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
perl
vulnerability
heap-based
buffer overflow
crafted regex
attacker controlled
byte buffer

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%

JSON

perl is vulnerable to Heap-based Buffer Overflow. The vulnerability is caused due to a crafted regular expression compiled by Perl which can lead to an attacker controlled byte buffer to overflow.

Related

fedora 8
osv 5
cvelist 1
nessus 15
redhat 9
almalinux 2
debiancve 1
openvas 14
ubuntucve 2
prion 1
alpinelinux 1
oraclelinux 2
mageia 1
cve 1
f5 1
redos 1
nvd 1
redhatcve 2
cloudfoundry 1
ubuntu 1
ibm 6
aix 1
hp 2
oracle 1
fedora
fedora
[SECURITY] Fedora 38 Update: polymake-4.10-2.fc38
2023-12-17 01:43:04
[SECURITY] Fedora 39 Update: perl-5.38.2-502.fc39
2023-12-06 01:40:44
[SECURITY] Fedora 38 Update: perl-PAR-Packer-1.057-4.fc38
2023-12-17 01:43:04
osv
osv
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
CVE-2023-47038
2023-12-18 14:15:08
cvelist
cvelist
CVE-2023-47038 Perl: write past buffer end via illegal user-defined unicode property
2023-12-18 13:43:07
nessus
nessus
RHEL 8 : 5.30_perl (Unpatched Vulnerability)
2024-06-03 00:00:00
Oracle Linux 9 : perl (ELSA-2024-2228)
2024-05-06 00:00:00
Fedora 38 : perl / perl-Devel-Cover / perl-PAR-Packer / polymake (2023-9ef8a60a05)
2023-12-16 00:00:00
redhat
redhat
(RHSA-2024:3128) Moderate: perl:5.32 security update
2024-05-22 06:35:41
(RHSA-2024:2228) Moderate: perl security update
2024-04-30 06:15:06
(RHSA-2024:3473) Moderate: OpenShift Virtualization 4.14.6 Images security update
2024-05-29 15:45:20
almalinux
almalinux
Moderate: perl security update
2024-04-30 00:00:00
Moderate: perl:5.32 security update
2024-05-22 00:00:00
debiancve
debiancve
CVE-2023-47038
2023-12-18 14:15:08
openvas
openvas
Fedora: Security Advisory for perl-PAR-Packer (FEDORA-2023-9ef8a60a05)
2023-12-18 00:00:00
Fedora: Security Advisory for polymake (FEDORA-2023-c67f4dbf13)
2023-12-06 00:00:00
Fedora: Security Advisory for perl (FEDORA-2023-c67f4dbf13)
2023-12-06 00:00:00
ubuntucve
ubuntucve
CVE-2023-47038
2023-11-25 00:00:00
CVE-2023-47100
2023-12-02 00:00:00
prion
prion
Heap overflow
2023-12-18 14:15:00
alpinelinux
alpinelinux
CVE-2023-47038
2023-12-18 14:15:08
oraclelinux
oraclelinux
perl security update
2024-05-02 00:00:00
perl:5.32 security update
2024-05-24 00:00:00
mageia
mageia
Updated perl packages fix a security vulnerability
2024-02-04 05:49:27
cve
cve
CVE-2023-47038
2023-12-18 14:15:08
f5
f5
K000138640 : Perl vulnerability CVE-2023-47038
2024-02-17 00:00:00
redos
redos
ROS-20240405-10
2024-04-05 00:00:00
nvd
nvd
CVE-2023-47038
2023-12-18 14:15:08
redhatcve
redhatcve
CVE-2023-47038
2023-11-27 12:00:36
CVE-2023-47100
2023-12-21 05:00:32
cloudfoundry
cloudfoundry
USN-6517-1: Perl vulnerabilities | Cloud Foundry
2024-03-18 00:00:00
ubuntu
ubuntu
Perl vulnerabilities
2023-11-27 00:00:00
ibm
ibm
Security Bulletin: AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021, CVE-2023-47038, CVE-2023-47100)
2024-02-23 16:53:01
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
2024-07-18 11:16:35
Security Bulletin: Vulnerability with Perl, Snappy, Psf Request, spring-web-5.3.33.jar , Apache HTTP Server, OpenJDK, affect IBM Cloud Object Storage Systems (July 2024v1)
2024-07-12 14:44:46
aix
aix
AIX is vulnerable to arbitrary command execution due to Perl (CVE-2024-25021 CVE-2023-47038 CVE-2023-47100)
2024-02-21 15:59:59
hp
hp
HP ThinPro 8.1 SP 2 Security Updates
2024-04-12 00:00:00
HP ThinPro 8.0 SP 8 Security Updates
2024-03-01 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%

JSON
Related for VERACODE:44401
fedora8osv5cvelist1nessus15redhat9almalinux2debiancve1openvas14ubuntucve2prion1alpinelinux1oraclelinux2mageia1cve1f51redos1nvd1redhatcve2cloudfoundry1ubuntu1ibm6aix1hp2oracle1