Do your applications use this vulnerable package?
Test your applications
Overview
An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer overflow, with control over the bytes written.
References
CVSS Score
9.8
high severity
-
Attack VectorNetwork
-
Attack ComplexityLow
-
Privileges RequiredNone
-
User InteractionNone
-
ScopeUnchanged
-
ConfidentialityHigh
-
IntegrityHigh
-
AvailabilityHigh
- CVE
- CVE-2018-6797
- CWE
- CWE-787
- Snyk ID
- SNYK-DEBIAN9-PERL-327700
- Disclosed
- 17 Apr, 2018
- Published
- 17 Apr, 2018