Vulnetix
Try Vulnetix Request Demo
CVE-2017-12883 PUBLISHED

Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.

EPSS 4.48% · 89.0th percentile

Risk Scores

EPSS Score
4.48%
89.0th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSperl0, 5.14.2-21build1, 5.18.1-4
Ubuntu:16.04:LTSperl0, 5.20.2-6, 5.22.1-3

Timeline

References

Open in Interactive Console →