CVE-2010-4777 PUBLISHED CVSS 4.300000190734863 MEDIUM

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.

EPSS 5.45% · 90.1th percentile

Risk Scores

CVSS v2.0
4.300000190734863
EPSS Score
5.45%
90.1th percentile

Affected Products

VendorProductVersions
perlperl5.10, 5.12.0, 5.14.0
n/an/an/a

Timeline

References

Open in Interactive Console →