Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1819 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3352 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined     substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum     count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the     subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular     expression on a 32-bit perl build triggers a heap buffer overflow at compile time. (CVE-2026-8376)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
319851	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2026-1819)	Nessus	Amazon Linux Local Security Checks	critical
319818	Amazon Linux 2 : perl, --advisory ALAS2-2026-3352 (ALAS-2026-3352)	Nessus	Amazon Linux Local Security Checks	critical
316506	Linux Distros Unpatched Vulnerability : CVE-2026-8376	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-8376

critical

Tenable Plugins

critical

critical

critical