High USN-6100-1 1 CVE

libhtml-stripscripts-perl vulnerability

Published May 23, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that HTML::StripScripts does not properly parse HTML
content with certain style attributes. A remote attacker could use this issue
to cause a regular expression denial of service (ReDoS).

Fixed packages 5

Release	Package	Fixed in
Ubuntu · 18.04 LTS 18.04:LTS	libhtml-stripscripts-perl	1.06-1ubuntu0.18.04.1
Ubuntu · 20.04 LTS 20.04:LTS	libhtml-stripscripts-perl	1.06-1ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS	libhtml-stripscripts-perl	1.06-1ubuntu0.22.04.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	libhtml-stripscripts-perl	1.05-1ubuntu0.1~esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	libhtml-stripscripts-perl	1.05-2ubuntu0.1~esm1

Vulnerabilities 1

High 7.5

CVE-2023-24038

The HTML-StripScripts module through 1.06 for Perl allows _hss_attval_style ReDoS because of catastrophic backtracking …

libhtml-stripscripts-perl libhtml-stripscripts-perl Debian Ubuntu

Jan 21, 2023

References

report
https://ubuntu.com/security/CVE-2023-24038