CVE-2018-6913

CRITICAL9.8EPSS 3.9%

perl - security update

Published: 4/17/2018Modified: 3/9/2026

Also known as:DSA-4172-1ALPINE-CVE-2018-6913DEBIAN-CVE-2018-6913

Description

Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.

Affected packages (4)

Alpine/perlfrom 0, < 5.26.2-r0
Debian/perlfrom 0, < 5.26.1-6
Debian/perlfrom 0, < 5.14.2-21+deb7u6
Debian/perlfrom 0, < 5.20.2-3+deb8u10

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2018-6913
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-6913