VDB

ALPINE-CVE-2018-18311

ALPINE-CVE-2018-18311 PUBLISHED CVSS 9.800000190734863 CRITICAL

Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Risk Scores

CVSS v3.0
9.800000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Alpine:v3.7perl0, 5.10.0-r0, 5.10.0-r1
Alpine:v3.15perl5.16.0-r0, 5.26.2-r1, 5.26.2-r0
Alpine:v3.11perl0, 5.26.2-r1, 5.26.2-r0
Alpine:v3.8perl5.20.2-r1, 0, 5.10.0-r0
Alpine:v3.22perl5.18.1-r0, 5.14.2-r1, 5.14.2-r0
Alpine:v3.9perl5.26.2-r1, 0, 5.10.0-r0
Alpine:v3.18perl5.10.0-r1, 5.20.1-r0, 5.20.0-r0
Alpine:v3.19perl5.14.2-r0, 5.12.3-r0, 0
Alpine:v3.17perl5.24.0-r2, 5.10.1-r1, 5.10.1-r2
Alpine:v3.14perl0, 5.26.2-r1, 5.16.1-r0
Alpine:v3.21perl5.20.2-r1, 5.12.2-r1, 5.12.2-r0
Alpine:v3.23perl5.14.2-r1, 5.16.0-r0, 5.16.1-r0
Alpine:v3.10perl5.16.2-r0, 0, 5.10.0-r0
Alpine:v3.16perl5.22.2-r0, 5.20.2-r0, 5.20.1-r0
Alpine:v3.6perl5.16.2-r0, 5.24.4-r1, 5.24.4-r0
Alpine:v3.12perl5.16.0-r0, 5.16.1-r0, 5.16.2-r0
Alpine:v3.20perl5.10.1-r0, 5.10.0-r0, 5.10.0-r1
Alpine:v3.13perl5.16.0-r0, 5.16.1-r0, 5.16.2-r0

Timeline

  • Dec 7, 2018 CVE Published
  • Dec 3, 2025 CVE Updated
  • Apr 30, 2026 Distribution Patch
Open in Interactive Console →
$ Console Community · 100/wk Open console ›