CVE-2017-12814
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2017-12814
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-12814.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2017-12814
- Related
- Withdrawn
- 2024-05-08T06:49:37.581506Z
- Published
- 2017-09-28T01:29:01Z
- Modified
- 2020-07-15T03:15:18Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers to execute arbitrary code via a long environment variable.
- References
-
- http://www.securityfocus.com/bid/101051
- https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1
- https://perl5.git.perl.org/perl.git/log/refs/tags/v5.26.1-RC1
- https://rt.perl.org/Public/Bug/Display.html?id=131665
- https://security.netapp.com/advisory/ntap-20180426-0001/
- https://www.oracle.com/security-alerts/cpujul2020.html