Skip to content
OpenAdvisories
High USN-7434-2 1 CVE

perl vulnerability

Published Apr 23, 2025 · Updated Feb 4, 2026

Ecosystem: Ubuntu

Summary

USN-7434-1 fixed a vulnerability in Perl. This update provides the
corresponding update for Ubuntu 25.04.

Original advisory details:

It was discovered that Perl incorrectly handled transliterating non-ASCII
bytes. A remote attacker could use this issue to cause Perl to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 perl 5.40.1-2ubuntu0.1

Vulnerabilities 1

  • High 8.4
    CVE-2024-56406

    Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_…

    perl perl perl perl Debian Ubuntu Azure Linux Alpine

References

  • report
    https://ubuntu.com/security/CVE-2024-56406