CVE-2017-12837 PUBLISHED

Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to cause a denial of service (out-of-bounds write) via a regular expression with a '\N{}' escape and the case-insensitive modifier.

EPSS 3.16% · 86.8th percentile

Risk Scores

EPSS Score
3.16%
86.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSperl5.22.1-9, 0, 5.20.2-6
Ubuntu:14.04:LTSperl0, 5.14.2-21build1, 5.18.1-4

Timeline

References

Open in Interactive Console →