CVE-2018-18312

Published: 29 November 2018

Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations.

Notes

5.18 - 5.28

looks to me like this was introduced by:
https://perl5.git.perl.org/perl.git/commit/6798c95dd27b33efd71f394c18649af7bbaf42b7
trusty doesn't look affected

Priority

Medium

CVSS 3 base score: 9.8

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18312
• https://ubuntu.com/security/notices/USN-3834-1
• NVD
• Launchpad
• Debian

Bugs

• https://rt.perl.org/Public/Bug/Display.html?id=133423