Описание
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 5.26.0-8ubuntu1 |
| devel | not-affected | 5.26.0-8ubuntu1 |
| esm-infra-legacy/trusty | released | 5.18.2-2ubuntu1.3 |
| esm-infra/xenial | released | 5.22.1-9ubuntu0.2 |
| precise/esm | not-affected | 5.14.2-6ubuntu2.6 |
| trusty | released | 5.18.2-2ubuntu1.3 |
| trusty/esm | released | 5.18.2-2ubuntu1.3 |
| upstream | released | 5.26.0-8 |
| vivid/ubuntu-core | ignored | end of life |
| xenial | released | 5.22.1-9ubuntu0.2 |
Показывать по
6.4 Medium
CVSS2
9.1 Critical
CVSS3
Связанные уязвимости
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 ...
Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote attackers to disclose sensitive information or cause a denial of service (application crash) via a crafted regular expression with an invalid '\N{U+...}' escape.
6.4 Medium
CVSS2
9.1 Critical
CVSS3