A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.

The remote NewStart CGSL host, running version MAIN 7.02, has perl packages installed that are affected by a vulnerability:

  - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses. (CVE-2024-56406)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7500 advisory.

    * perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-     ASCII bytes (CVE-2024-56406)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = '\x{FF}' x 1000000; tr/\xFF/\x{100}/;'    Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses.(CVE-2024-56406)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = '\x{FF}' x 1000000; tr/\xFF/\x{100}/;'    Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses.(CVE-2024-56406)

Tenable has extracted the preceding description block directly from the EulerOS perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle Database Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2025 CPU advisory.

  - Vulnerability in the Oracle Database component of Oracle Database Server.  Supported versions that     are affected are 19.3-19.27 and  23.4-23.8. Easily exploitable vulnerability allows low privileged     attacker having Create Session, Create Procedure privilege with network access via Oracle Net to     compromise Oracle Database.  Successful attacks of this vulnerability can result in takeover of Oracle     Database. (CVE-2025-30751)

  - Vulnerability in the Java VM component of Oracle Database Server.  Supported versions that are affected     are 19.3-19.27 and  21.3-21.18. Easily exploitable vulnerability allows low privileged attacker having     Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM.
    While the vulnerability is in Java VM, attacks may significantly impact additional products (scope change).
    Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete     access to all Java VM accessible data. (CVE-2025-50069)

  - Vulnerability in the Oracle Text (FreeType) component of Oracle Database Server.  Supported versions     that are affected are 19.3-19.27, 21.3-21.18 and  23.4-23.8. Difficult to exploit vulnerability allows     low privileged attacker having Create Session, Create Index privilege with network access via Oracle Net     to compromise Oracle Text (FreeType).  Successful attacks of this vulnerability can result in takeover     of Oracle Text (FreeType). (CVE-2025-27363)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-26c0346398 advisory.

    Fix CVE-2024-56406



Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7500 advisory.

    [4:5.40.2-512.1]
    - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
    - Resolves: RHEL-87186

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7500 advisory.

    Perl is a high-level programming language that is commonly used for system administration utilities and     web programming.

    Security Fix(es):

    * perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-     ASCII bytes (CVE-2024-56406)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the perl package has been released.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-8445f115f6 advisory.

    Fix CVE-2024-56406




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-11fcc87c66 advisory.

    Fix CVE-2024-56406




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory.

  - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses. (CVE-2024-56406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory.

  - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses. (CVE-2024-56406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a380f43e-19e5-11f0-9568-b42e991fc52e advisory.

    9b29abf9-4ab0-4765-b253-1875cd9b441e reports:
    A heap buffer overflow vulnerability was discovered in Perl.
            When there are non-ASCII bytes in the left-hand-side of the `tr`             operator, `S_do_trans_invmap` can overflow the destination pointer             `d`.
            $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;'             Segmentation fault (core dumped)             It is believed that this vulnerability can enable Denial of             Service and possibly Code Execution attacks on platforms that             lack sufficient defenses.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7434-1 advisory.

    It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could     use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary     code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote host is prior to 5.34.3 / 5.40.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-104-01 advisory.

    New perl packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5902 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5902-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 13, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : perl     CVE ID         : CVE-2024-56406

    Nathan Mills discovered a heap-based buffer overflow vulnerability in     the implementation of the Perl programming language when transliterating     non-ASCII bytes with tr///, which may result in denial of service, or     potentially the execution of arbitrary code.

    For the stable distribution (bookworm), this problem has been fixed in     version 5.36.0-7+deb12u2.

    We recommend that you upgrade your perl packages.

    For the detailed security status of perl please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/perl

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
271288	NewStart CGSL MAIN 7.02 : perl Vulnerability (NS-SA-2025-0251)	Nessus	NewStart CGSL Local Security Checks	high
266650	RockyLinux 10 : perl (RLSA-2025:7500)	Nessus	Rocky Linux Local Security Checks	high
265117	EulerOS Virtualization 2.13.1 : perl (EulerOS-SA-2025-2180)	Nessus	Huawei Local Security Checks	high
265108	EulerOS Virtualization 2.13.0 : perl (EulerOS-SA-2025-2181)	Nessus	Huawei Local Security Checks	high
242466	EulerOS 2.0 SP12 : perl (EulerOS-SA-2025-1835)	Nessus	Huawei Local Security Checks	high
242444	EulerOS 2.0 SP12 : perl (EulerOS-SA-2025-1834)	Nessus	Huawei Local Security Checks	high
242296	Oracle Database Server (July 2025 CPU)	Nessus	Databases	critical
241298	Fedora 42 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-26c0346398)	Nessus	Fedora Local Security Checks	high
241005	EulerOS 2.0 SP13 : perl (EulerOS-SA-2025-1710)	Nessus	Huawei Local Security Checks	high
240993	EulerOS 2.0 SP13 : perl (EulerOS-SA-2025-1695)	Nessus	Huawei Local Security Checks	high
240858	Oracle Linux 10 : perl (ELSA-2025-7500)	Nessus	Oracle Linux Local Security Checks	high
238400	EulerOS 2.0 SP11 : perl (EulerOS-SA-2025-1673)	Nessus	Huawei Local Security Checks	high
238378	EulerOS 2.0 SP11 : perl (EulerOS-SA-2025-1674)	Nessus	Huawei Local Security Checks	high
237809	RHEL 10 : perl (RHSA-2025:7500)	Nessus	Red Hat Local Security Checks	high
235141	Photon OS 5.0: Perl PHSA-2025-5.0-0514	Nessus	PhotonOS Local Security Checks	high
235009	Fedora 40 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-8445f115f6)	Nessus	Fedora Local Security Checks	high
234709	Fedora 41 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-11fcc87c66)	Nessus	Fedora Local Security Checks	high
234640	Azure Linux 3.0 Security Update: perl (CVE-2024-56406)	Nessus	Azure Linux Local Security Checks	high
234637	CBL Mariner 2.0 Security Update: perl (CVE-2024-56406)	Nessus	MarinerOS Local Security Checks	high
234497	FreeBSD : Perl -- heap buffer overflow when transliterating non-ASCII bytes (a380f43e-19e5-11f0-9568-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	critical
234343	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Perl vulnerability (USN-7434-1)	Nessus	Ubuntu Local Security Checks	critical
234327	Slackware Linux 15.0 / current perl Vulnerability (SSA:2025-104-01)	Nessus	Slackware Local Security Checks	critical
234241	Debian dsa-5902 : libperl-dev - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2024-56406

high

Tenable Plugins

high

high

high

high

high

high

critical

high

high

high

high

high

high

high

high

high

high

high

high

critical

critical

critical

critical