ALPINE-CVE-2020-12723 PUBLISHED CVSS 7.5 HIGH

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Alpine:v3.12perl0, 5.30.2-r0, 5.30.1-r0
Alpine:v3.19perl5.10.0-r1, 5.30.2-r0, 5.30.1-r0
Alpine:v3.9perl5.26.1-r1, 5.26.2-r0, 5.26.2-r1
Alpine:v3.22perl5.26.1-r0, 5.20.2-r1, 5.24.1-r2
Alpine:v3.15perl5.24.1-r2, 0, 5.10.0-r0
Alpine:v3.13perl0, 5.20.0-r0, 5.20.1-r0
Alpine:v3.21perl5.30.1-r0, 5.24.1-r1, 5.24.0-r2
Alpine:v3.17perl5.10.1-r0, 5.24.1-r2, 5.30.0-r2
Alpine:v3.16perl5.28.1-r0, 0, 5.10.0-r1
Alpine:v3.14perl5.28.1-r0, 5.18.1-r0, 5.18.0-r0
Alpine:v3.23perl5.30.1-r0, 5.18.2-r0, 5.18.1-r0
Alpine:v3.10perl5.24.1-r0, 5.10.0-r1, 5.10.1-r1
Alpine:v3.18perl5.18.2-r0, 5.14.0-r0, 5.26.2-r0
Alpine:v3.11perl5.10.1-r2, 5.18.1-r0, 5.18.0-r0
Alpine:v3.20perl5.12.2-r1, 5.12.2-r0, 5.12.2-r1

Timeline

References

Open in Interactive Console →