Description
Integer overflow in the regular expression engine in Perl 5.8.x allows context-dependent attackers to cause a denial of service (stack consumption and application crash) by matching a crafted regular expression against a long string.
References
- http://bugs.gentoo.org/show_bug.cgi?id=313565
- [oss-security] 20100414 Re: CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) mailing-list
- [oss-security] 20100408 CVE Request -- perl v5.8.* -- stack overflow by processing certain regex (Gentoo BTS#313565 / RH BZ#580605) mailing-list
- 55314 third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=580605
- http://perldoc.perl.org/perl5100delta.html