CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.

Link	Resource
https://www.debian.org/security/2018/dsa-4172	Third Party Advisory
https://rt.perl.org/Public/Bug/Display.html?id=132063	Vendor Advisory
http://www.securitytracker.com/id/1040681	Third Party Advisory VDB Entry
https://access.redhat.com/errata/RHSA-2018:1192	Third Party Advisory
https://usn.ubuntu.com/3625-1/	Third Party Advisory
https://security.gentoo.org/glsa/201909-01
https://www.oracle.com/security-alerts/cpujul2020.html

Configuration 1

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:17.10:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server:7.5:*:*:*:*:*:*:*

---

Published : 2018-04-17 08:29

Updated : 2020-07-15 03:15

---

NVD link : CVE-2018-6798

Mitre link : CVE-2018-6798

No products.

CWE-125

Out-of-bounds Read