CVE-2018-6798
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-6798
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-6798.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2018-6798
- Downstream
- Related
- Published
- 2018-04-17T20:29:00Z
- Modified
- 2025-10-13T08:03:40.629451Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.
- References
-
- http://www.securitytracker.com/id/1040681
- https://access.redhat.com/errata/RHSA-2018:1192
- https://rt.perl.org/Public/Bug/Display.html?id=132063
- https://security.gentoo.org/glsa/201909-01
- https://usn.ubuntu.com/3625-1/
- https://www.debian.org/security/2018/dsa-4172
- https://www.oracle.com/security-alerts/cpujul2020.html
Affected packages
Git / github.com/perl/perl5
Affected versions
if-0.*
if-0.0605
v5.*
v5.22.0
v5.23.0
v5.23.1
v5.23.2
v5.23.3
v5.23.4
v5.23.5
v5.23.6
v5.23.7
v5.23.8
v5.23.9
v5.24.0
v5.24.0-RC1
v5.24.0-RC2
v5.24.0-RC3
v5.24.0-RC4
v5.24.0-RC5
v5.25.0
v5.25.1
v5.25.10
v5.25.11
v5.25.12
v5.25.2
v5.25.3
v5.25.4
v5.25.5
v5.25.6
v5.25.7
v5.25.8
v5.25.9
v5.26.0
v5.26.0-RC1
v5.26.0-RC2