Perl CVE-2017-12883 Buffer Overflow Vulnerability

Bugtraq ID:	100852
Class:	Boundary Condition Error
CVE:	CVE-2017-12883
Remote:	Yes
Local:	No
Published:	Sep 12 2017 12:00AM
Updated:	Sep 25 2017 09:00AM
Credit:	Karl Williamson
Vulnerable:	Perl Perl 5.28 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Perl CVE-2017-12883 Buffer Overflow Vulnerability

Perl is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input.

An attacker can exploit this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.

Perl CVE-2017-12883 Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Perl CVE-2017-12883 Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Perl CVE-2017-12883 Buffer Overflow Vulnerability

References:

• PATCH: [perl #131598] (Karl Williamson)
  
• Perl Homepage (Perl)
  
• CVE-2017-12883 perl: Buffer over-read in regular expression parser (Red Hat)