Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Heap-based buffer overflow in the pack function in Perl     before 5.26.2 allows context-dependent attackers to     execute arbitrary code via a large item     count.(CVE-2018-6913)

  - regcomp.c in Perl before 5.30.3 allows a buffer     overflow via a crafted regular expression because of     recursive S_study_chunk calls.(CVE-2020-12723)

  - Perl before 5.30.3 on 32-bit platforms allows a     heap-based buffer overflow because nested regular     expression quantifiers have an integer     overflow.(CVE-2020-10543)

  - Perl before 5.30.3 has an integer overflow related to     mishandling of a 'PL_regkind[OP(n)] == NOTHING'     situation. A crafted regular expression could lead to     malformed bytecode with a possibility of instruction     injection.(CVE-2020-10878)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - Heap-based buffer overflow in the pack function in Perl     before 5.26.2 allows context-dependent attackers to     execute arbitrary code via a large item     count.(CVE-2018-6913)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the perl packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in Perl 5.18 through 5.26. A     crafted regular expression can cause a heap-based     buffer overflow, with control over the bytes     written.(CVE-2018-6797)

  - An issue was discovered in Perl 5.22 through 5.26.
    Matching a crafted locale dependent regular expression     can cause a heap-based buffer over-read and potentially     information disclosure.(CVE-2018-6798)

  - Heap-based buffer overflow in the pack function in Perl     before 5.26.2 allows context-dependent attackers to     execute arbitrary code via a large item     count.(CVE-2018-6913)

  - Perl before 5.26.3 and 5.28.0 before 5.28.1 has a     buffer overflow via a crafted regular expression that     triggers invalid write operations.(CVE-2018-18312)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201909-01 (Perl: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Perl. Please review the       CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of macOS that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities in the following components:

 - Accounts
 - AMD
 - APFS
 - ATS
 - Bluetooth
 - CFNetwork
 - CoreCrypto
 - CUPS
 - DesktopServices
 - Intel Graphics Driver
 - IOGraphics
 - Kernel
 - libxpc
 - LinkPresentation
 - Perl
 - Ruby

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

An update of the perl package has been released.

This release provides Perl 5.26.2 that fixes a heap buffer overflow in the pack() function and two overflows in regular expression engine.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for perl fixes the following issues :

These security issue were fixed :

CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216).

CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233).

CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234).

CVE-2018-12015: The Archive::Tar module allowed remote attackers to bypass a directory-traversal protection mechanism and overwrite arbitrary files (bsc#1096718)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for perl fixes the following issues: These security issue were fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

  - CVE-2018-12015: The Archive::Tar module allowed remote     attackers to bypass a directory-traversal protection     mechanism and overwrite arbitrary files (bsc#1096718)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6. It is, therefore, affected by multiple vulnerabilities.

Note that successful exploitation of the most serious issues can result in arbitrary code execution.

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities.

This update for perl fixes the following issues :

Security issues fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

This update was imported from the SUSE:SLE-12:Update update project.

This update for perl fixes the following issues: Security issues fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

  - CVE-2018-6797: Fixed sharp-s regexp overflow     (bsc#1082234).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This release provides Perl 5.24.4 that fixes a heap buffer overflow in the pack() function and two overflows in the regular expression engine.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for perl fixes the following issues: Security issue fixed :

  - CVE-2018-6913: Fixed space calculation issues in     pp_pack.c (bsc#1082216).

  - CVE-2018-6798: Fixed heap buffer overflow in regexec.c     (bsc#1082233).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that Perl incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Perl to hang, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-8853)

It was discovered that Perl incorrectly loaded libraries from the current working directory. A local attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-6185)

It was discovered that Perl incorrectly handled the rmtree and remove_tree functions. A local attacker could possibly use this issue to set the mode on arbitrary files. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2017-6512)

Brian Carpenter discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue has only been addressed in Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-6797)

Nguyen Duc Manh discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS and Ubuntu 17.10. (CVE-2018-6798)

GwanYeong Kim discovered that Perl incorrectly handled certain data when using the pack function. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-6913).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

perldelta :

CVE-2018-6797: heap-buffer-overflow (WRITE of size 1) in S_regatom (regcomp.c)

A crafted regular expression could cause a heap buffer write overflow, with control over the bytes written. [perl #132227]

CVE-2018-6798: Heap-buffer-overflow in Perl__byte_dump_string (utf8.c)

Matching a crafted locale dependent regular expression could cause a heap buffer read overflow and potentially information disclosure.
[perl #132063]

CVE-2018-6913: heap-buffer-overflow in S_pack_rec

pack() could cause a heap buffer write overflow with a large item count. [perl #131844]

Multiple vulnerabilities were discovered in the implementation of the Perl programming language. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2018-6797     Brian Carpenter reported that a crafted regular     expression could cause a heap buffer write overflow,     with control over the bytes written.

  - CVE-2018-6798     Nguyen Duc Manh reported that matching a crafted locale     dependent regular expression can cause a heap-based     buffer over-read and potentially information disclosure.

  - CVE-2018-6913     GwanYeong Kim reported that 'pack()' could cause a heap     buffer write overflow with a large item count.

GwanYeong Kim reported that 'pack()' could cause a heap buffer write overflow with a large item count.

For Debian 7 'Wheezy', these problems have been fixed in version 5.14.2-21+deb7u6.

We recommend that you upgrade your perl packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
142313	EulerOS 2.0 SP2 : perl (EulerOS-SA-2020-2380)	Nessus	Huawei Local Security Checks	critical
135550	EulerOS 2.0 SP3 : perl (EulerOS-SA-2020-1421)	Nessus	Huawei Local Security Checks	critical
131491	EulerOS Virtualization for ARM 64 3.0.3.0 : perl (EulerOS-SA-2019-2326)	Nessus	Huawei Local Security Checks	critical
128590	GLSA-201909-01 : Perl: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
700517	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus Network Monitor	Operating System Detection	critical
121950	Photon OS 2.0: Perl PHSA-2018-2.0-0050	Nessus	PhotonOS Local Security Checks	critical
121865	Photon OS 1.0: Perl PHSA-2018-1.0-0167	Nessus	PhotonOS Local Security Checks	critical
120813	Fedora 28 : 4:perl (2018-d1ba58394e)	Nessus	Fedora Local Security Checks	critical
118275	SUSE SLES12 Security Update : perl (SUSE-SU-2018:1972-2)	Nessus	SuSE Local Security Checks	critical
111150	SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1972-1)	Nessus	SuSE Local Security Checks	critical
111137	macOS 10.13.x < 10.13.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
111136	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-004)	Nessus	MacOS X Local Security Checks	critical
109385	openSUSE Security Update : perl (openSUSE-2018-400)	Nessus	SuSE Local Security Checks	critical
109356	SUSE SLED12 / SLES12 Security Update : perl (SUSE-SU-2018:1074-1)	Nessus	SuSE Local Security Checks	critical
109350	Fedora 26 : 1:perl-Module-CoreList / 4:perl (2018-0050f7c0d1)	Nessus	Fedora Local Security Checks	critical
109221	Fedora 27 : 1:perl-Module-CoreList / 4:perl (2018-1c8b49fbc7)	Nessus	Fedora Local Security Checks	critical
109162	SUSE SLES11 Security Update : perl (SUSE-SU-2018:0976-1)	Nessus	SuSE Local Security Checks	critical
109086	Ubuntu 14.04 LTS / 16.04 LTS : Perl vulnerabilities (USN-3625-1)	Nessus	Ubuntu Local Security Checks	critical
109051	FreeBSD : perl -- multiple vulnerabilities (41c96ffd-29a6-4dcc-9a88-65f5038fa6eb)	Nessus	FreeBSD Local Security Checks	critical
109047	Debian DSA-4172-1 : perl - security update	Nessus	Debian Local Security Checks	critical
109043	Debian DLA-1345-1 : perl security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2018-6913

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical