CVE-2018-18311
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 12%
exploitation probability
12%top 4% of all CVEs
observed exploitation
nono source reports it
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.
Affected products
n/a · n/aReferences
https://access.redhat.com/errata/RHBA-2019:0327https://access.redhat.com/errata/RHSA-2019:0001https://access.redhat.com/errata/RHSA-2019:0010https://access.redhat.com/errata/RHSA-2019:0109https://access.redhat.com/errata/RHSA-2019:1790https://access.redhat.com/errata/RHSA-2019:1942https://access.redhat.com/errata/RHSA-2019:2400https://bugzilla.redhat.com/show_bug.cgi?id=1646730http://seclists.org/fulldisclosure/2019/Mar/49https://github.com/Perl/perl5/commit/34716e2a6ee2af96078d62b065b7785c001194behttps://kc.mcafee.com/corporate/index?page=content&id=SB10278https://lists.debian.org/debian-lts-announce/2018/11/msg00039.html