perldelta :

CVE-2018-6797: heap-buffer-overflow (WRITE of size 1) in S_regatom (regcomp.c)

A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. [perl #132227]

CVE-2018-6798: Heap-buffer-overflow in Perl__byte_dump_string (utf8.c)

Matching a crafted locale dependent regular expression could cause a heap buffer read overflow and potentially information disclosure.
[perl #132063]

CVE-2018-6913: heap-buffer-overflow in S_pack_rec

pack() could cause a heap buffer write overflow with a large item count. [perl #131844]

This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for perl fixes the following issues: Security issues fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update of the perl package has been released.

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities.

The remote host is running a version of macOS that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities in the following components:

 - Accounts
 - AMD
 - APFS
 - ATS
 - Bluetooth
 - CFNetwork
 - CoreCrypto
 - CUPS
 - DesktopServices
 - Intel Graphics Driver
 - IOGraphics
 - Kernel
 - libxpc
 - LinkPresentation
 - Perl
 - Ruby

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
109051	FreeBSD : perl -- multiple vulnerabilities (41c96ffd-29a6-4dcc-9a88-65f5038fa6eb)	Nessus	FreeBSD Local Security Checks	2018/4/16	2024/11/4	critical
109221	Fedora 27 : 1:perl-Module-CoreList / 4:perl (2018-1c8b49fbc7)	Nessus	Fedora Local Security Checks	2018/4/23	2024/10/29	critical
109356	SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1074-1)	Nessus	SuSE Local Security Checks	2018/4/26	2024/10/24	critical
121950	Photon OS 2.0: Perl PHSA-2018-2.0-0050	Nessus	PhotonOS Local Security Checks	2019/2/7	2024/7/22	critical
111136	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-004)	Nessus	MacOS X Local Security Checks	2018/7/17	2024/9/4	critical
700517	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	2019/4/10	2019/4/10	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical