CVE-2023-47100

Name
CVE-2023-47100
Description
In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
https://github.com/Perl/perl5/commit/ff1f9f59360afeebd6f75ca1502f5c3ebf077da3
cve@mitre.org https://github.com/Perl/perl5/commit/12c313ce49b36160a7ca2e9b07ad5bd92ee4a010
cve@mitre.org https://github.com/Perl/perl5/commit/7047915eef37fccd93e7cd985c29fe6be54650b6

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* perl >= 5.30.0 < 5.38.2

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
perl 3.18-main 5.36.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
perl 3.17-main 5.36.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
perl 3.16-main 5.34.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable