Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap buffer overflow at compile time.

According to the versions of the perl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds.

    Perl_study_chunk in regcomp_study.c checked the size of the joined substring buffer in characters rather     than bytes. For a quantified fixed substring with a large minimum count, the byte length mincount * l     could overflow SSize_t, producing an undersized SvGROW allocation; the subsequent copy writes past the end     of the buffer.

    A caller that compiles an attacker-controlled regular expression on a 32-bit perl build triggers a heap     buffer overflow at compile time.(CVE-2026-8376)

Tenable has extracted the preceding description block directly from the EulerOS perl security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the perl package has been released.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8467-1 advisory.

    It was discovered that Perl's Archive::Tar module incorrectly handled symlink

    and hardlink targets during extraction. An attacker could use this issue to read or overwrite arbitrary     files outside the extraction directory. (CVE-2026-42496)

    It was discovered that Perl had a heap buffer overflow when compiling regular expressions with a repeated     fixed string on 32-bit builds. An attacker could use this issue to cause a denial of service or possibly     execute arbitrary code. (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1819 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of perl installed on the remote host is prior to 5.16.3-299. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3352 advisory.

    Buffer overflow in Perl_study_chunk (CVE-2026-8376)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Perl versions through 5.43.10 have a heap buffer overflow when compiling regular expressions with a     repeated fixed string on 32-bit builds. Perl_study_chunk in regcomp_study.c checked the size of the joined     substring buffer in characters rather than bytes. For a quantified fixed substring with a large minimum     count, the byte length mincount * l could overflow SSize_t, producing an undersized SvGROW allocation; the     subsequent copy writes past the end of the buffer. A caller that compiles an attacker-controlled regular     expression on a 32-bit perl build triggers a heap buffer overflow at compile time. (CVE-2026-8376)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
326643	EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2707)	Nessus	Huawei Local Security Checks	critical
326618	EulerOS 2.0 SP10 : perl (EulerOS-SA-2026-2666)	Nessus	Huawei Local Security Checks	critical
326204	EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-2552)	Nessus	Huawei Local Security Checks	critical
326166	EulerOS 2.0 SP12 : perl (EulerOS-SA-2026-2612)	Nessus	Huawei Local Security Checks	critical
323255	Photon OS 5.0: Perl PHSA-2026-5.0-0900	Nessus	PhotonOS Local Security Checks	critical
322788	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS : Perl vulnerabilities (USN-8467-1)	Nessus	Ubuntu Local Security Checks	critical
319851	Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2026-1819)	Nessus	Amazon Linux Local Security Checks	critical
319818	Amazon Linux 2 : perl, --advisory ALAS2-2026-3352 (ALAS-2026-3352)	Nessus	Amazon Linux Local Security Checks	critical
316506	Linux Distros Unpatched Vulnerability : CVE-2026-8376	Nessus	Misc.	critical

Detections

Analytics

CVE-2026-8376

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical