This update for perl fixes the following issues: These security issue were fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

  - CVE-2018-12015: The Archive::Tar module allowed remote     attackers to bypass a directory-traversal protection     mechanism and overwrite arbitrary files (bsc#1096718)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1192 advisory.

    Perl is a high-level programming language that is commonly used for system administration utilities and     web programming.

    Security Fix(es):

    * perl: heap write overflow in regcomp.c (CVE-2018-6797)

    * perl: heap read overflow in regexec.c (CVE-2018-6798)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank Perl 5 Porters for reporting these issues. Upstream acknowledges Brian     Carpenter as the original reporter of CVE-2018-6797; and Nguyen Duc Manh as the original reporter of     CVE-2018-6798.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1630-1 advisory.

    Security issues fixed:

    - CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216)
    - CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233)
    - CVE-2023-31484: Enabled TLS certificate verification in CPAN (bsc#1210999)
    - CVE-2017-6512: Fixed File::Path rmtree/remove_tree race condition (bsc#1047178)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3625-1 advisory.

    It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly     use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu     14.04 LTS. (CVE-2015-8853)

    It was discovered that Perl incorrectly loaded libraries from the current working directory. A local     attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04     LTS and Ubuntu 16.04 LTS. (CVE-2016-6185)

    It was discovered that Perl incorrectly handled the rmtree and remove_tree functions. A local attacker     could possibly use this issue to set the mode on arbitrary files. This issue only affected Ubuntu 14.04     LTS and Ubuntu 16.04 LTS. (CVE-2017-6512)

    Brian Carpenter discovered that Perl incorrectly handled certain regular expressions. An attacker could     use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary     code. This issue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-6797)

    Nguyen Duc Manh discovered that Perl incorrectly handled certain regular expressions. An attacker could     use this issue to cause Perl to crash, resulting in a denial of service. This issue only affected Ubuntu     16.04 LTS and Ubuntu 17.10. (CVE-2018-6798)

    GwanYeong Kim discovered that Perl incorrectly handled certain data when using the pack function. An     attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly     execute arbitrary code. (CVE-2018-6913)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This release provides Perl 5.26.2 that fixes a heap buffer overflow in the pack() function and two overflows in regular expression engine.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
111150	SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1972-1)	Nessus	SuSE Local Security Checks	2018/7/18	2024/9/4	critical
194024	RHEL 6 / 7 : rh-perl524-perl (RHSA-2018:1192)	Nessus	Red Hat Local Security Checks	2024/4/27	2025/4/15	critical
197050	SUSE SLES15 Security Update : perl (SUSE-SU-2024:1630-1)	Nessus	SuSE Local Security Checks	2024/5/15	2026/6/26	critical
109086	Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3625-1)	Nessus	Ubuntu Local Security Checks	2018/4/17	2025/9/3	critical
120813	Fedora 28 : 4:perl (2018-d1ba58394e)	Nessus	Fedora Local Security Checks	2019/1/3	2024/6/28	critical
109221	Fedora 27 : 1:perl-Module-CoreList / 4:perl (2018-1c8b49fbc7)	Nessus	Fedora Local Security Checks	2018/4/23	2024/10/29	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical