Skip to content
OpenAdvisories
Unscored CVE-2017-12837 EUVD-2017-4374GHSA-q52c-c9hv-jc77

Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote at…

Published Sep 19, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: perl Package: perl Package: perl Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 perl 5.26.0-8 —
Debian 13 perl 5.26.0-8 —
Debian 12 perl 5.26.0-8 —
Debian 9 perl 5.24.1-3+deb9u2 DSA-3982-1
Debian 8 perl 5.20.2-3+deb8u9 DSA-3982-1

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS perl 5.22.1-9ubuntu0.2 USN-3478-1
Ubuntu 14.04 LTS perl 5.18.2-2ubuntu1.3 USN-3478-1

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 perl +10 5.42.2-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-AutoSplit +1 5.74-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-B 1.89-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Benchmark +1 1.27-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Class-Struct 0.68-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-DBM_Filter 0.07-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Devel-Peek 1.36-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Devel-SelfStubber 1.06-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-DynaLoader 1.57-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-English +1 1.11-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Errno 1.38-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-ExtUtils-Constant 0.25-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Fcntl +1 1.20-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-Basename 2.86-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-Compare 1.100.800-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-Copy 2.41-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-DosGlob 1.12-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-Find 1.44-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-File-stat +3 1.14-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-FileHandle 2.05-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-FindBin 1.54-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-GDBM_File +1 1.24-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Hash-Util 0.32-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-I18N-LangTags 0.45-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-I18N-Langinfo 0.24-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-IO 1.55-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Locale-Maketext-Simple 0.21-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Math-Complex 1.63-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Memoize +1 1.17-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Module-Loaded 0.08-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-NDBM_File 1.18-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-NEXT 0.69-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Net +3 1.04-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Opcode 1.69-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-POSIX 2.23-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Pod-Html +1 1.35-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Safe 2.47-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Search-Dict 1.08-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-SelectSaver +2 1.02-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-SelfLoader 1.28-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Symbol 1.09-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Sys-Hostname 1.25-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Term-Complete 1.403-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Test 1.31-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Thread 3.06-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Thread-Semaphore 2.13-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Tie 4.6-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Tie-Memoize 1.1-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Time-Piece 1.3600-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-Unicode-UCD 0.81-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-base +2 2.27-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-blib 1.07-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-debugger 1.60-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-deprecate 0.04-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-encoding-warnings 0.14-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-filetest +1 1.03-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-if 0.61.000-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-less +1 0.03-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-lib 0.65-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-mro 1.29-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-open +1 1.13-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-overload +1 1.40-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-overloading 0.02-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-sigtrap +2 1.10-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-sort 2.06-524.hum1 RHSA-2026:6206
Red Hat Hardened Images 1 perl-vars +2 1.05-524.hum1 RHSA-2026:6206

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 12 SP3 perl 5.18.2-12.3.1 SUSE-SU-2017:3092-1
SLES 12 SP2 perl 5.18.2-12.3.1 SUSE-SU-2017:3092-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES for SAP 12 SP3 perl 5.18.2-12.3.1 SUSE-SU-2017:3092-1
SLES for SAP 12 SP2 perl 5.18.2-12.3.1 SUSE-SU-2017:3092-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed perl 5.34.0-1.1 openSUSE-SU-2024:11158-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.24 perl 5.26.1-r0 —
Alpine v3.23 perl 5.26.1-r0 —
Alpine v3.22 perl 5.26.1-r0 —
Alpine v3.21 perl 5.26.1-r0 —
Alpine v3.20 perl 5.26.1-r0 —
Show 17 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 perl 5.26.1-r0 —
Alpine v3.18 perl 5.26.1-r0 —
Alpine v3.17 perl 5.26.1-r0 —
Alpine v3.16 perl 5.26.1-r0 —
Alpine v3.15 perl 5.26.1-r0 —
Alpine v3.14 perl 5.26.1-r0 —
Alpine v3.13 perl 5.26.1-r0 —
Alpine v3.12 perl 5.26.1-r0 —
Alpine v3.11 perl 5.26.1-r0 —
Alpine v3.10 perl 5.26.1-r0 —
Alpine v3.9 perl 5.26.1-r0 —
Alpine v3.8 perl 5.26.1-r0 —
Alpine v3.7 perl 5.26.1-r0 —
Alpine v3.6 perl 5.24.3-r0 —
Alpine v3.5 perl 5.24.3-r0 —
Alpine v3.4 perl 5.22.3-r0 —
Alpine v3.3 perl 5.22.3-r0 —

Advisories 5

References