Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensitive information from process memory.
{ "vanir_signatures": [ { "target": { "file": "regcomp.c" }, "id": "CVE-2018-18313-0a4ef1d6", "signature_version": "v1", "digest": { "line_hashes": [ "101663868690937553214163442339379018565", "59784038656455587243834010724958712382", "28653314884608291336798897290106167798", "96782067870058283391976206744121659574", "162305355118608742235120534489597881333", "127016832599108291182225561584131541991", "249628749345757174872968758037840711806", "288202923974203869187008973508210421650", "259826910144805988136646004747213420863", "87602121002291453069095856109041256948", "165962808217590646015153787518747062719", "169368250554995426997668874526762561190", "317752557994194264263538380391852906952", "232794246500132610966781115686424671305" ], "threshold": 0.9 }, "source": "https://github.com/perl/perl5/commit/43b2f4ef399e2fd7240b4eeb0658686ad95f8e62", "signature_type": "Line", "deprecated": false }, { "target": { "function": "S_regatom", "file": "regcomp.c" }, "id": "CVE-2018-18313-3fc0e987", "signature_version": "v1", "digest": { "length": 16823.0, "function_hash": "83938533586342320801161483788721225942" }, "source": "https://github.com/perl/perl5/commit/43b2f4ef399e2fd7240b4eeb0658686ad95f8e62", "signature_type": "Function", "deprecated": false }, { "target": { "function": "S_regclass", "file": "regcomp.c" }, "id": "CVE-2018-18313-88bce564", "signature_version": "v1", "digest": { "length": 26791.0, "function_hash": "256924597074835678896577529209401787607" }, "source": "https://github.com/perl/perl5/commit/43b2f4ef399e2fd7240b4eeb0658686ad95f8e62", "signature_type": "Function", "deprecated": false }, { "target": { "function": "S_grok_bslash_N", "file": "regcomp.c" }, "id": "CVE-2018-18313-8c7e952f", "signature_version": "v1", "digest": { "length": 3419.0, "function_hash": "63122755006878456440416897999935609546" }, "source": "https://github.com/perl/perl5/commit/43b2f4ef399e2fd7240b4eeb0658686ad95f8e62", "signature_type": "Function", "deprecated": false } ] }