A vulnerability was found in perl 5.30.0 through 5.38.0. This issue occurs when a crafted regular expression is compiled by perl, which can allow an attacker controlled byte buffer overflow in a heap allocated buffer.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
27 Mar 2025, 14:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2024:2228 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2024:3128 - Third Party Advisory | |
| References | () https://access.redhat.com/security/cve/CVE-2023-47038 - Third Party Advisory, Broken Link | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2249523 - Issue Tracking, Third Party Advisory | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ/ - Third Party Advisory | |
| References | () https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property - Vendor Advisory | |
| CPE | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:9.4:*:*:*:*:*:*:* cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_aus:9.4:*:*:*:*:*:*:* |
|
| First Time |
Redhat enterprise Linux Aus
Redhat enterprise Linux Eus Fedoraproject fedora Fedoraproject |
Information
Published : 2023-12-18 14:15
Updated : 2025-03-27 14:42
NVD link : CVE-2023-47038
Mitre link : CVE-2023-47038
CVE.ORG link : CVE-2023-47038
JSON object : View
Products Affected
fedoraproject
- fedora
redhat
- enterprise_linux_eus
- enterprise_linux_aus
- enterprise_linux
perl
- perl