Vulnerability · Published Dec 18, 2023 · Assigned by redhat
CVE-2023-47038Perl: write past buffer end via illegal user-defined unicode property
High 7.0
In plain English
A high-severity heap buffer overflow in perl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.0High
Exploit odds (30 days)0.8%top 42.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | perl | 4:5.32.1-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl | 4:5.32.1-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Algorithm-Diff | 1.1903-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Archive-Tar | 2.38-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Archive-Zip | 1.68-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Attribute-Handlers | 1.01-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Attribute-Handlers | 1.01-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-AutoLoader | 5.74-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-AutoLoader | 5.74-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-AutoSplit | 5.74-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-AutoSplit | 5.74-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-B | 1.80-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-B | 1.80-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Benchmark | 1.23-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Benchmark | 1.23-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-CPAN | 2.28-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-CPAN-DistnameInfo | 0.12-13.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-CPAN-Meta | 2.150010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-CPAN-Meta-Requirements | 2.140-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-CPAN-Meta-YAML | 0.018-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Carp | 1.50-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Class-Struct | 0.66-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Class-Struct | 0.66-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Bzip2 | 2.28-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Raw-Bzip2 | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Raw-Lzma | 2.096-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Compress-Raw-Zlib | 2.096-2.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Config-Extensions | 0.03-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Config-Extensions | 0.03-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Config-Perl-V | 0.32-441.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-DBM_Filter | 0.06-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-DBM_Filter | 0.06-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-DB_File | 1.855-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Data-Dumper | 2.174-440.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Data-OptList | 0.110-7.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Data-Section | 0.200007-8.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Devel-PPPort | 3.62-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Devel-Peek | 1.28-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Devel-Peek | 1.28-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Devel-SelfStubber | 1.06-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Devel-SelfStubber | 1.06-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Devel-Size | 0.83-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Digest | 1.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Digest-MD5 | 2.58-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Digest-SHA | 1:6.02-2.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-DirHandle | 1.05-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-DirHandle | 1.05-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Dumpvalue | 2.27-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Dumpvalue | 2.27-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-DynaLoader | 1.47-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-DynaLoader | 1.47-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Encode | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Encode-Locale | 1.05-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Encode-devel | 4:3.08-461.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-English | 1.11-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-English | 1.11-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Env | 1.04-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Errno | 1.30-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Errno | 1.30-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Exporter | 5.74-458.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-CBuilder | 1:0.280236-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-Command | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-Constant | 0.25-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-ExtUtils-Constant | 0.25-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-ExtUtils-Embed | 1.35-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-ExtUtils-Embed | 1.35-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-ExtUtils-Install | 2.20-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-MM-Utils | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-MakeMaker | 2:7.46-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-Manifest | 1:1.73-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ExtUtils-Miniperl | 1.09-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-ExtUtils-Miniperl | 1.09-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-ExtUtils-ParseXS | 1:3.40-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Fcntl | 1.13-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Fcntl | 1.13-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Fedora-VSP | 0.001-10.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-Basename | 2.85-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-Basename | 2.85-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-File-Compare | 1.100.600-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-Compare | 1.100.600-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-File-Copy | 2.34-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-Copy | 2.34-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-File-DosGlob | 1.12-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-DosGlob | 1.12-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-File-Fetch | 1.00-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-Find | 1.37-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-Find | 1.37-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-File-HomeDir | 1.004-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-Path | 2.16-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-Temp | 1:0.231.100-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-Which | 1.23-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-File-stat | 1.09-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-File-stat | 1.09-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-FileCache | 1.10-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-FileCache | 1.10-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-FileHandle | 2.03-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-FileHandle | 2.03-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Filter | 2:1.60-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Filter-Simple | 0.96-457.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-FindBin | 1.51-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-FindBin | 1.51-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-GDBM_File | 1.18-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-GDBM_File | 1.18-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Getopt-Long | 1:2.52-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Getopt-Std | 1.12-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Getopt-Std | 1.12-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-HTTP-Tiny | 0.078-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Hash-Util | 0.23-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Hash-Util | 0.23-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Hash-Util-FieldHash | 1.20-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Hash-Util-FieldHash | 1.20-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-I18N-Collate | 1.02-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-I18N-Collate | 1.02-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-I18N-LangTags | 0.44-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-I18N-LangTags | 0.44-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-I18N-Langinfo | 0.19-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-I18N-Langinfo | 0.19-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-IO | 1.43-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-IO | 1.43-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-IO-Compress | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IO-Compress-Lzma | 2.096-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IO-Socket-IP | 0.41-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IO-Zlib | 1:1.10-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IPC-Cmd | 2:1.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IPC-Open3 | 1.21-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-IPC-Open3 | 1.21-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IPC-SysV | 2.09-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-IPC-System-Simple | 1.30-3.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Importer | 0.025-6.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-JSON-PP | 1:4.04-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Locale-Maketext | 1.29-440.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Locale-Maketext-Simple | 1:0.21-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Locale-Maketext-Simple | 1:0.21-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-MIME-Base64 | 3.15-1001.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-MRO-Compat | 0.13-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Math-BigInt | 1:1.9998.18-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Math-BigInt-FastCalc | 0.500.900-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Math-BigRat | 0.2614-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Math-Complex | 1.59-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Math-Complex | 1.59-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Memoize | 1.03-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Memoize | 1.03-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Module-Build | 2:0.42.31-5.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Module-CoreList | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Module-CoreList-tools | 1:5.20211020-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Module-Load | 1:0.36-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Module-Load-Conditional | 0.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Module-Loaded | 1:0.08-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Module-Loaded | 1:0.08-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Module-Metadata | 1.000037-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-NDBM_File | 1.15-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-NDBM_File | 1.15-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-NEXT | 0.67-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-NEXT | 0.67-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Net | 1.02-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Net | 1.02-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Net-Ping | 2.72-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-ODBM_File | 1.16-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-ODBM_File | 1.16-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Object-HashBase | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Object-HashBase-tools | 0.009-4.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Opcode | 1.48-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Opcode | 1.48-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-POSIX | 1.94-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-POSIX | 1.94-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Package-Generator | 1.106-12.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Params-Check | 1:0.38-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Params-Util | 1.102-2.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+3181+91434291 | ALSA-2024:3128 |
| AlmaLinux:8 | perl-PathTools | 3.78-439.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Perl-OSType | 1.010-397.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-PerlIO-via-QuotedPrint | 0.09-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Checker | 4:1.74-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Escapes | 1:1.07-396.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Functions | 1.13-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Pod-Functions | 1.13-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Pod-Html | 1.25-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Pod-Html | 1.25-481.el9 | ALSA-2024:2228 |
| AlmaLinux:8 | perl-Pod-Parser | 1.63-1001.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Perldoc | 3.28.01-443.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Simple | 1:3.42-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Pod-Usage | 4:2.01-1.module_el8.6.0+2766+8bf0b7ce | ALSA-2024:3128 |
| AlmaLinux:8 | perl-Safe | 2.41-473.module_el8.10.0+3779+d5938d28 | ALSA-2024:3128 |
| AlmaLinux:9 | perl-Safe | 2.41-481.el9 | ALSA-2024:2228 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| perl | 5.30.0 – before 5.34.35.36.0 – before 5.36.35.38.0 – before 5.38.2 | |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 9 | see references |
| Red Hat | Red Hat Enterprise Linux 6 | see references |
| Red Hat | Red Hat Enterprise Linux 7 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
| Red Hat | Red Hat Enterprise Linux 8 | see references |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- RHSA-2024:2228 vendor-advisory, x_refsource_REDHAT
- RHSA-2024:3128 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2023-47038 vdb-entry, x_refsource_REDHAT
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1056746
- RHBZ#2249523 issue-tracking, x_refsource_REDHAT
- https://github.com/aquasecurity/trivy/discussions/8400
- https://www.suse.com/security/cve/CVE-2023-47100.html
- https://ubuntu.com/security/CVE-2023-47100
- https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3
- https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6
- https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/ x_transferred
- https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property x_transferred
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UMDZZ4SCEW6FRWZDMXGAKZ35THTAWFG6/