NetSight
high7.5

CVE-2013-10076

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list.

Impact

ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion.

Affected products

ProductAffected versions
ExtUtils::Typemaps::STL::Vector
before 1.05

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References