It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-448 advisory.

    2024-02-01: CVE-2023-47100 was added to this advisory.

    A crafted regular expression when compiled by perl 5.30.0 through 5.38.0 can cause a one-byte attacker     controlled buffer overflow in a heap allocated buffer. (CVE-2023-47038)

    In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a     property name associated with a \p{...} regular expression construct is mishandled. The earliest affected     version is 5.30.0. (CVE-2023-47100)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Amazon Linux 2023 : perl, perl-Attribute-Handlers, perl-AutoLoader (ALAS2023-2023-448)

high Nessus Plugin ID 186976

Version 1.5