Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.

fedora FEDORA-2026-475559cbb9: perl-5.42.3-525.fc44 perl-Devel-Cover-1.52-4.fc44 perl-PAR-Packer-1.064-6.fc44 polymake-4.15-11.fc44

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:22847-1 advisory.

    - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with     malformed DOS date       (bsc#1266361).
    - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on     32-bit builds       (bsc#1266304).
    - CVE-2026-12087: `Socket`'s `pack_ip_mreq_source()` can copy adjacent heap memory into the returned     packed structure       (bsc#1268349).
    - CVE-2026-57432: an integer overflow in `S_measure_struct` leads to an out-of-bounds heap read in `pack`     and `unpack`       (bsc#1271372).
    - CVE-2026-13221: regex trie branch-count overflow leads to silent false-positive/negative pattern     matching       (bsc#1271386).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21411-1 advisory.

    - CVE-2025-15649: `IO:Uncompress:Unzip` propagates uncaught exception when parsing zip header with     malformed DOS date       (bsc#1266361).
    - CVE-2026-8376: heap buffer overflow when compiling regular expressions with a repeated fixed string on     32-bit builds       (bsc#1266304).
    - CVE-2026-12087: `Socket`'s `pack_ip_mreq_source()` can copy adjacent heap memory into the returned     packed structure       (bsc#1268349).
    - CVE-2026-57432: an integer overflow in `S_measure_struct` leads to an out-of-bounds heap read in `pack`     and `unpack`       (bsc#1271372).
    - CVE-2026-13221: regex trie branch-count overflow leads to silent false-positive/negative pattern     matching       (bsc#1271386).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds.Perl_study_chunk in regcomp_study.c checked the size of the joined     substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum     count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the     subsequent copy writes past the end of the buffer.A caller that compiles an attacker-controlled regular     expression on a 32-bit perl build triggers a heap buffer overflow at compile time.(CVE-2026-8376)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the  packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds.Perl_study_chunk in regcomp_study.c checked the size of the joined     substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum     count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the     subsequent copy writes past the end of the buffer.A caller that compiles an attacker-controlled regular     expression on a 32-bit perl build triggers a heap buffer overflow at compile time.(CVE-2026-8376)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds.

    Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather     than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l     could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end     of the buffer.

    A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap     buffer overflow at compile time.(CVE-2026-8376)

Tenable has extracted the preceding description block directly from the EulerOS perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the perl package has been released.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8467-1 advisory.

    It was discovered that Perl's Archive::Tar module incorrectly handled symlink

    and hardlink targets during extraction. An attacker could use this issue to read or overwrite arbitrary     files outside the extraction directory. (CVE-2026-42496)

    It was discovered that Perl had a heap buffer overflow when compiling regular expressions with a repeated     fixed string on 32-bit builds. An attacker could use this issue to cause a denial of service or possibly     execute arbitrary code. (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1819 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3352 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined     substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum     count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the     subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular     expression on a 32-bit perl build triggers a heap buffer overflow at compile time. (CVE-2026-8376)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
330290	SUSE SLES16 Security Update : perl (SUSE-SU-2026:22847-1)	Nessus	SuSE Local Security Checks	critical
329512	openSUSE 16 Security Update : perl (openSUSE-SU-2026:21411-1)	Nessus	SuSE Local Security Checks	critical
328623	EulerOS Virtualization 2.10.0 : perl (EulerOS-SA-2026-2864)	Nessus	Huawei Local Security Checks	critical
328618	EulerOS Virtualization 2.12.1 (EulerOS-SA-2026-2746)	Nessus	Huawei Local Security Checks	critical
328594	EulerOS Virtualization 2.10.1 : perl (EulerOS-SA-2026-2833)	Nessus	Huawei Local Security Checks	critical
328584	EulerOS Virtualization 2.12.0 : perl (EulerOS-SA-2026-2792)	Nessus	Huawei Local Security Checks	critical
326643	EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2707)	Nessus	Huawei Local Security Checks	critical
326618	EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2666)	Nessus	Huawei Local Security Checks	critical
326204	EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-2552)	Nessus	Huawei Local Security Checks	critical
326166	EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-2612)	Nessus	Huawei Local Security Checks	critical
323255	Photon OS 5.0: Perl PHSA-2026-5.0-0900	Nessus	PhotonOS Local Security Checks	critical
322788	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Perl vulnerabilities (USN-8467-1)	Nessus	Ubuntu Local Security Checks	critical
319851	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2026-1819)	Nessus	Amazon Linux Local Security Checks	critical
319818	Amazon Linux 2 : perl, --advisory ALAS2-2026-3352 (ALAS-2026-3352)	Nessus	Amazon Linux Local Security Checks	critical
316506	Linux Distros Unpatched Vulnerability : CVE-2026-8376	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-8376

critical

Tenable Plugins

Coming Soon

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical