NetSight
IP …
high8.6

CVE-2020-10878

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation.

Impact

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Affected products

VendorProductAffected versions
PerlPerl
before 5.30.3
FedoraprojectFedora
Version 31
OpensuseLeap
Version 15.1
NetappOncommand Workflow Automation
All versions
NetappSnap Creator Framework
All versions
OracleCommunications Billing And Revenue Management
Versions 12.0.0.2.0, 12.0.0.3.0
OracleCommunications Diameter Signaling Router
from 8.0.0 through 8.5.0
OracleCommunications Eagle Application Processor
from 16.1.0 through 16.4.0
OracleCommunications Eagle Lnp Application Processor
Versions 10.1, 10.2, 46.7, 46.8, 46.9
OracleCommunications Lsms
from 13.1 through 13.4
OracleCommunications Offline Mediation Controller
Version 12.0.0.3.0
OracleCommunications Performance Intelligence Center
from 10.3.0.0.0 through 10.3.0.2.1
from 10.4.0.1.0 through 10.4.0.3.1

Weakness classification

CWE-190

References