Vulnerabilities > CVE-2023-47100 - Improper Handling of Exceptional Conditions vulnerability in Perl

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

perl

CWE-755

critical

NVD

Published: 2023-12-02

Updated: 2023-12-14

Summary

In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.

Vulnerable Configurations

Part	Description	Count
Application	Perl Perl Perl 5.30.0 Perl Perl 5.30.1 Perl Perl 5.30.2 Perl Perl 5.30.3 Perl Perl 5.31.0 Perl Perl 5.31.1 Perl Perl 5.31.2 Perl Perl 5.31.3 Perl Perl 5.31.4 Perl Perl 5.31.5 Perl Perl 5.31.6 Perl Perl 5.31.7 Perl Perl 5.31.8 Perl Perl 5.31.9 Perl Perl 5.31.10 Perl Perl 5.31.11 Perl Perl 5.32.0 Perl Perl 5.32.1 Perl Perl 5.33.0 Perl Perl 5.33.1 Perl Perl 5.33.2 Perl Perl 5.33.3 Perl Perl 5.33.4 Perl Perl 5.33.5 Perl Perl 5.33.6 Perl Perl 5.33.7 Perl Perl 5.33.8 Perl Perl 5.33.9 Perl Perl 5.34.0 Perl Perl 5.34.1 Perl Perl 5.35.0 Perl Perl 5.35.1 Perl Perl 5.35.2 Perl Perl 5.35.3 Perl Perl 5.35.4 Perl Perl 5.35.5 Perl Perl 5.35.6 Perl Perl 5.35.7 Perl Perl 5.35.8 Perl Perl 5.35.9 Perl Perl 5.35.10 Perl Perl 5.35.11 Perl Perl 5.36.0 Perl Perl 5.36.1 Perl Perl 5.37.0 Perl Perl 5.37.1 Perl Perl 5.37.2 Perl Perl 5.37.3 Perl Perl 5.37.4 Perl Perl 5.37.5 Perl Perl 5.37.6 Perl Perl 5.37.7 Perl Perl 5.37.8 Perl Perl 5.37.9 Perl Perl 5.37.10 Perl Perl 5.37.11 Perl Perl 5.38.0 Perl Perl 5.38.1	85

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References