Skip to content
OpenAdvisories
High USN-7434-1 1 CVE

perl vulnerability

Published Apr 14, 2025 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Perl incorrectly handled transliterating non-ASCII
bytes. A remote attacker could use this issue to cause Perl to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS perl 5.34.0-3ubuntu1.4
Ubuntu · 24.04 LTS 24.04:LTS perl 5.38.2-3.2ubuntu0.1

Vulnerabilities 1

  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-56406