CVE-2020-12723
High
Description
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Perl
PublishedJun 5, 2020
First seenJun 5, 2020
How to fix
Update
- perl perl5.30.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| perl perl | v < 5.30.3 | 5.30.3 |
| netapp oncommand_workflow_automation | No range specified | — |
| netapp snap_creator_framework | No range specified | — |
| fedoraproject fedora | 31 | — |
| opensuse leap | 15.1 | — |
| oracle communications_billing_and_revenue_management | 12.0.0.2.0, 12.0.0.3.0 | — |
| oracle communications_diameter_signaling_router | 8.0.0 ≤ v ≤ 8.5.0 | — |
| oracle communications_eagle_application_processor | 16.1.0 ≤ v ≤ 16.4.0 | — |
| oracle communications_eagle_lnp_application_processor | 10.1, 10.2 | — |
| oracle communications_lsms | 13.1 ≤ v ≤ 13.4 | — |
| oracle communications_offline_mediation_controller | 12.0.0.3.0 | — |
| oracle communications_performance_intelligence_center | 10.3.0.0.0 ≤ v ≤ 10.3.0.2.1, 10.4.0.1.0 ≤ v ≤ 10.4.0.3.1 | — |
| oracle configuration_manager | 12.1.2.0.8 | — |
| oracle enterprise_manager_base_platform | 13.4.0.0 | — |
| oracle sd-wan_edge | 8.2, 9.0, 9.1 | — |
| oracle tekelec_platform_distribution | 7.4.0 ≤ v ≤ 7.7.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.