A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40 are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`. $ perl -e '$_ = "\x{FF}" x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that lack sufficient defenses.

redhat RHSA-2025:7500: RHSA-2025:7500: perl security update (Important)

An update of the perl package has been released.

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-8445f115f6 advisory.

    Fix CVE-2024-56406




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-11fcc87c66 advisory.

    Fix CVE-2024-56406




Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory.

  - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses. (CVE-2024-56406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-56406 advisory.

  - A heap buffer overflow vulnerability was discovered in Perl. Release branches 5.34, 5.36, 5.38 and 5.40     are affected, including development versions from 5.33.1 through 5.41.10. When there are non-ASCII bytes     in the left-hand-side of the `tr` operator, `S_do_trans_invmap` can overflow the destination pointer `d`.
    $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;' Segmentation fault (core dumped) It is believed     that this vulnerability can enable Denial of Service and possibly Code Execution attacks on platforms that     lack sufficient defenses. (CVE-2024-56406)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a380f43e-19e5-11f0-9568-b42e991fc52e advisory.

    9b29abf9-4ab0-4765-b253-1875cd9b441e reports:
    A heap buffer overflow vulnerability was discovered in Perl.
            When there are non-ASCII bytes in the left-hand-side of the `tr`             operator, `S_do_trans_invmap` can overflow the destination pointer             `d`.
            $ perl -e '$_ = \x{FF} x 1000000; tr/\xFF/\x{100}/;'             Segmentation fault (core dumped)             It is believed that this vulnerability can enable Denial of             Service and possibly Code Execution attacks on platforms that             lack sufficient defenses.

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7434-1 advisory.

    It was discovered that Perl incorrectly handled transliterating non-ASCII bytes. A remote attacker could     use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary     code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote host is prior to 5.34.3 / 5.40.2. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-104-01 advisory.

    New perl packages are available for Slackware 15.0 and -current to fix a security issue.

Tenable has extracted the preceding description block directly from the perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5902 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-5902-1                   security@debian.org     https://www.debian.org/security/                     Salvatore Bonaccorso     April 13, 2025                        https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : perl     CVE ID         : CVE-2024-56406

    Nathan Mills discovered a heap-based buffer overflow vulnerability in     the implementation of the Perl programming language when transliterating     non-ASCII bytes with tr///, which may result in denial of service, or     potentially the execution of arbitrary code.

    For the stable distribution (bookworm), this problem has been fixed in     version 5.36.0-7+deb12u2.

    We recommend that you upgrade your perl packages.

    For the detailed security status of perl please refer to its security     tracker page at:
    https://security-tracker.debian.org/tracker/perl

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
235141	Photon OS 5.0: Perl PHSA-2025-5.0-0514	Nessus	PhotonOS Local Security Checks	high
235009	Fedora 40 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-8445f115f6)	Nessus	Fedora Local Security Checks	high
234709	Fedora 41 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-11fcc87c66)	Nessus	Fedora Local Security Checks	high
234640	Azure Linux 3.0 Security Update: perl (CVE-2024-56406)	Nessus	Azure Linux Local Security Checks	high
234637	CBL Mariner 2.0 Security Update: perl (CVE-2024-56406)	Nessus	MarinerOS Local Security Checks	high
234497	FreeBSD : Perl -- heap buffer overflow when transliterating non-ASCII bytes (a380f43e-19e5-11f0-9568-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	critical
234343	Ubuntu 22.04 LTS / 24.04 LTS / 24.10 : Perl vulnerability (USN-7434-1)	Nessus	Ubuntu Local Security Checks	critical
234327	Slackware Linux 15.0 / current perl Vulnerability (SSA:2025-104-01)	Nessus	Slackware Local Security Checks	critical
234241	Debian dsa-5902 : libperl-dev - security update	Nessus	Debian Local Security Checks	critical

Detections

Analytics

CVE-2024-56406

high

Tenable Plugins

Coming Soon

high

high

high

high

high

critical

critical

critical

critical