title: Perl: write past buffer end via illegal user-defined unicode property
description: A vulnerability was found in perl. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.
problem types: Heap-based Buffer Overflow
affected:
{
product: perl
vendor: n/a
versions:
status: unaffected, version: 5.32.1
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:6
defaultStatus: unaffected
packageName: perl
product: Red Hat Enterprise Linux 6
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:7
defaultStatus: unaffected
packageName: perl
product: Red Hat Enterprise Linux 7
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: unaffected
packageName: perl
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: perl:5.30/perl
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:8
defaultStatus: affected
packageName: perl:5.32/perl
product: Red Hat Enterprise Linux 8
vendor: Red Hat
}
{
collectionURL: https://access.redhat.com/downloads/content/package-browser/
cpes: cpe:/o:redhat:enterprise_linux:9
defaultStatus: affected
packageName: perl
product: Red Hat Enterprise Linux 9
vendor: Red Hat
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: perl:5.34/perl
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: perl:5.32/perl
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: perl
product: Fedora
vendor: Fedora
}
{
collectionURL: https://packages.fedoraproject.org/
defaultStatus: affected
packageName: perl:5.36/perl
product: Fedora
vendor: Fedora
}
metrics:
other: [
content: {'namespace': 'https://access.redhat.com/security/updates/classification/', 'value': 'Moderate'}
type: Red Hat severity rating
]
workarounds: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.