CVE-2012-5195

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 91%
Affected Products (NVD)
VendorProductVersion
perlperl
5.12.0
perlperl
5.12.0:rc0
perlperl
5.12.0:rc1
perlperl
5.12.0:rc2
perlperl
5.12.0:rc3
perlperl
5.12.0:rc4
perlperl
5.12.0:rc5
perlperl
5.12.1
perlperl
5.12.1:rc1
perlperl
5.12.1:rc2
perlperl
5.12.2
perlperl
5.12.2:rc1
perlperl
5.12.3
perlperl
5.12.3:rc1
perlperl
5.12.3:rc2
perlperl
5.12.3:rc3
perlperl
5.12.4
perlperl
5.14.0
perlperl
5.14.0:rc1
perlperl
5.14.0:rc2
perlperl
5.14.0:rc3
perlperl
5.14.1
perlperl
5.14.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
perl
bookworm
5.36.0-7+deb12u1
fixed
bullseye
5.32.1-4+deb11u3
fixed
bullseye (security)
5.32.1-4+deb11u4
fixed
sid
5.40.0-6
fixed
trixie
5.40.0-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
perl
hardy
Fixed 5.8.8-12ubuntu0.7
released
lucid
Fixed 5.10.1-8ubuntu2.2
released
natty
ignored
oneiric
Fixed 5.12.4-4ubuntu0.1
released
precise
Fixed 5.14.2-6ubuntu2.2
released
quantal
Fixed 5.14.2-13ubuntu0.1
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
perl
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-Archive-Extract
RHEL 6
1:0.38-130.el6_4
fixed
perl-Archive-Tar
RHEL 6
0:1.58-130.el6_4
fixed
perl-CGI
RHEL 6
0:3.51-130.el6_4
fixed
perl-CPAN
RHEL 6
0:1.9402-130.el6_4
fixed
perl-CPANPLUS
RHEL 6
0:0.88-130.el6_4
fixed
perl-Compress-Raw-Bzip2
RHEL 6
0:2.020-130.el6_4
fixed
perl-Compress-Raw-Zlib
RHEL 6
1:2.020-130.el6_4
fixed
perl-Compress-Zlib
RHEL 6
0:2.020-130.el6_4
fixed
perl-Digest-SHA
RHEL 6
1:5.47-130.el6_4
fixed
perl-ExtUtils-CBuilder
RHEL 6
1:0.27-130.el6_4
fixed
perl-ExtUtils-Embed
RHEL 6
0:1.28-130.el6_4
fixed
perl-ExtUtils-MakeMaker
RHEL 6
0:6.55-130.el6_4
fixed
perl-ExtUtils-ParseXS
RHEL 6
1:2.2003.0-130.el6_4
fixed
perl-File-Fetch
RHEL 6
0:0.26-130.el6_4
fixed
perl-IO-Compress-Base
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Compress-Bzip2
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Compress-Zlib
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Zlib
RHEL 6
1:1.09-130.el6_4
fixed
perl-IPC-Cmd
RHEL 6
1:0.56-130.el6_4
fixed
perl-Locale-Maketext-Simple
RHEL 6
1:0.18-130.el6_4
fixed
perl-Log-Message
RHEL 6
1:0.02-130.el6_4
fixed
perl-Log-Message-Simple
RHEL 6
0:0.04-130.el6_4
fixed
perl-Module-Build
RHEL 6
1:0.3500-130.el6_4
fixed
perl-Module-CoreList
RHEL 6
0:2.18-130.el6_4
fixed
perl-Module-Load
RHEL 6
1:0.16-130.el6_4
fixed
perl-Module-Load-Conditional
RHEL 6
0:0.30-130.el6_4
fixed
perl-Module-Loaded
RHEL 6
1:0.02-130.el6_4
fixed
perl-Module-Pluggable
RHEL 6
1:3.90-130.el6_4
fixed
perl-Object-Accessor
RHEL 6
1:0.34-130.el6_4
fixed
perl-Package-Constants
RHEL 6
1:0.02-130.el6_4
fixed
perl-Params-Check
RHEL 6
1:0.26-130.el6_4
fixed
perl-Parse-CPAN-Meta
RHEL 6
1:1.40-130.el6_4
fixed
perl-Pod-Escapes
RHEL 6
1:1.04-130.el6_4
fixed
perl-Pod-Simple
RHEL 6
1:3.13-130.el6_4
fixed
perl-Term-UI
RHEL 6
0:0.20-130.el6_4
fixed
perl-Test-Harness
RHEL 6
0:3.17-130.el6_4
fixed
perl-Test-Simple
RHEL 6
0:0.92-130.el6_4
fixed
perl-Time-HiRes
RHEL 6
4:1.9721-130.el6_4
fixed
perl-Time-Piece
RHEL 6
0:1.15-130.el6_4
fixed
perl-core
RHEL 6
0:5.10.1-130.el6_4
fixed
perl-devel
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-libs
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-parent
RHEL 6
1:0.221-130.el6_4
fixed
perl-suidperl
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-version
RHEL 6
3:0.77-130.el6_4
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
perl
Amazon Linux 1
4:5.10.1-130.17.amzn1
fixed
perl-Archive-Extract
Amazon Linux 1
1:0.38-130.17.amzn1
fixed
perl-Archive-Tar
Amazon Linux 1
0:1.58-130.17.amzn1
fixed
perl-CGI
Amazon Linux 1
0:3.51-130.17.amzn1
fixed
perl-CPAN
Amazon Linux 1
0:1.9402-130.17.amzn1
fixed
perl-CPANPLUS
Amazon Linux 1
0:0.88-130.17.amzn1
fixed
perl-Compress-Raw-Bzip2
Amazon Linux 1
0:2.020-130.17.amzn1
fixed
perl-Compress-Raw-Zlib
Amazon Linux 1
0:2.023-130.17.amzn1
fixed
perl-Compress-Zlib
Amazon Linux 1
0:2.020-130.17.amzn1
fixed
perl-Digest-SHA
Amazon Linux 1
1:5.47-130.17.amzn1
fixed
perl-ExtUtils-CBuilder
Amazon Linux 1
1:0.27-130.17.amzn1
fixed
perl-ExtUtils-Embed
Amazon Linux 1
0:1.28-130.17.amzn1
fixed
perl-ExtUtils-MakeMaker
Amazon Linux 1
0:6.55-130.17.amzn1
fixed
perl-ExtUtils-ParseXS
Amazon Linux 1
1:2.2003.0-130.17.amzn1
fixed
perl-File-Fetch
Amazon Linux 1
0:0.26-130.17.amzn1
fixed
perl-IO-Compress-Base
Amazon Linux 1
0:2.020-130.17.amzn1
fixed
perl-IO-Compress-Bzip2
Amazon Linux 1
0:2.020-130.17.amzn1
fixed
perl-IO-Compress-Zlib
Amazon Linux 1
0:2.020-130.17.amzn1
fixed
perl-IO-Zlib
Amazon Linux 1
1:1.09-130.17.amzn1
fixed
perl-IPC-Cmd
Amazon Linux 1
1:0.56-130.17.amzn1
fixed
perl-Locale-Maketext-Simple
Amazon Linux 1
1:0.18-130.17.amzn1
fixed
perl-Log-Message
Amazon Linux 1
1:0.02-130.17.amzn1
fixed
perl-Log-Message-Simple
Amazon Linux 1
0:0.04-130.17.amzn1
fixed
perl-Module-Build
Amazon Linux 1
1:0.3500-130.17.amzn1
fixed
perl-Module-CoreList
Amazon Linux 1
0:2.18-130.17.amzn1
fixed
perl-Module-Load
Amazon Linux 1
1:0.16-130.17.amzn1
fixed
perl-Module-Load-Conditional
Amazon Linux 1
0:0.30-130.17.amzn1
fixed
perl-Module-Loaded
Amazon Linux 1
1:0.02-130.17.amzn1
fixed
perl-Module-Pluggable
Amazon Linux 1
1:3.90-130.17.amzn1
fixed
perl-Object-Accessor
Amazon Linux 1
1:0.34-130.17.amzn1
fixed
perl-Package-Constants
Amazon Linux 1
1:0.02-130.17.amzn1
fixed
perl-Params-Check
Amazon Linux 1
1:0.26-130.17.amzn1
fixed
perl-Parse-CPAN-Meta
Amazon Linux 1
1:1.40-130.17.amzn1
fixed
perl-Pod-Escapes
Amazon Linux 1
1:1.04-130.17.amzn1
fixed
perl-Pod-Simple
Amazon Linux 1
1:3.13-130.17.amzn1
fixed
perl-Term-UI
Amazon Linux 1
0:0.20-130.17.amzn1
fixed
perl-Test-Harness
Amazon Linux 1
0:3.17-130.17.amzn1
fixed
perl-Test-Simple
Amazon Linux 1
0:0.92-130.17.amzn1
fixed
perl-Time-HiRes
Amazon Linux 1
4:1.9721-130.17.amzn1
fixed
perl-Time-Piece
Amazon Linux 1
0:1.15-130.17.amzn1
fixed
perl-core
Amazon Linux 1
0:5.10.1-130.17.amzn1
fixed
perl-debuginfo
Amazon Linux 1
4:5.10.1-130.17.amzn1
fixed
perl-devel
Amazon Linux 1
4:5.10.1-130.17.amzn1
fixed
perl-libs
Amazon Linux 1
4:5.10.1-130.17.amzn1
fixed
perl-parent
Amazon Linux 1
1:0.221-130.17.amzn1
fixed
perl-suidperl
Amazon Linux 1
4:5.10.1-130.17.amzn1
fixed
perl-version
Amazon Linux 1
3:0.77-130.17.amzn1
fixed
Common Weakness Enumeration
References
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
http://perl5.git.perl.org/perl.git/commit/2709980d5a193ce6f3a16f0d19879a6560dcde44
http://rhn.redhat.com/errata/RHSA-2013-0685.html
http://secunia.com/advisories/51457
http://secunia.com/advisories/55314
http://www.debian.org/security/2012/dsa-2586
http://www.mandriva.com/security/advisories?name=MDVSA-2013:113
http://www.nntp.perl.org/group/perl.perl5.porters/2012/10/msg193886.html
http://www.openwall.com/lists/oss-security/2012/10/26/2
http://www.openwall.com/lists/oss-security/2012/10/27/1
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.securityfocus.com/bid/56287
http://www.ubuntu.com/usn/USN-1643-1
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0352
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
http://perl5.git.perl.org/perl.git/commit/2709980d5a193ce6f3a16f0d19879a6560dcde44
http://rhn.redhat.com/errata/RHSA-2013-0685.html
http://secunia.com/advisories/51457
http://secunia.com/advisories/55314
http://www.debian.org/security/2012/dsa-2586
http://www.mandriva.com/security/advisories?name=MDVSA-2013:113
http://www.nntp.perl.org/group/perl.perl5.porters/2012/10/msg193886.html
http://www.openwall.com/lists/oss-security/2012/10/26/2
http://www.openwall.com/lists/oss-security/2012/10/27/1
http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
http://www.securityfocus.com/bid/56287
http://www.ubuntu.com/usn/USN-1643-1
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0352