CVE-2012-5195

Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
Affected Products (NVD)
VendorProductVersion
perlperl
5.12.0
perlperl
5.12.0:rc0
perlperl
5.12.0:rc1
perlperl
5.12.0:rc2
perlperl
5.12.0:rc3
perlperl
5.12.0:rc4
perlperl
5.12.0:rc5
perlperl
5.12.1
perlperl
5.12.1:rc1
perlperl
5.12.1:rc2
perlperl
5.12.2
perlperl
5.12.2:rc1
perlperl
5.12.3
perlperl
5.12.3:rc1
perlperl
5.12.3:rc2
perlperl
5.12.3:rc3
perlperl
5.12.4
perlperl
5.14.0
perlperl
5.14.0:rc1
perlperl
5.14.0:rc2
perlperl
5.14.0:rc3
perlperl
5.14.1
perlperl
5.14.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
perl
bookworm
5.36.0-7+deb12u1
fixed
bullseye
5.32.1-4+deb11u3
fixed
bullseye (security)
5.32.1-4+deb11u4
fixed
sid
5.40.0-6
fixed
trixie
5.40.0-6
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
perl
hardy
Fixed 5.8.8-12ubuntu0.7
released
lucid
Fixed 5.10.1-8ubuntu2.2
released
natty
ignored
oneiric
Fixed 5.12.4-4ubuntu0.1
released
precise
Fixed 5.14.2-6ubuntu2.2
released
quantal
Fixed 5.14.2-13ubuntu0.1
released
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
perl
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-Archive-Extract
RHEL 6
1:0.38-130.el6_4
fixed
perl-Archive-Tar
RHEL 6
0:1.58-130.el6_4
fixed
perl-CGI
RHEL 6
0:3.51-130.el6_4
fixed
perl-CPAN
RHEL 6
0:1.9402-130.el6_4
fixed
perl-CPANPLUS
RHEL 6
0:0.88-130.el6_4
fixed
perl-Compress-Raw-Bzip2
RHEL 6
0:2.020-130.el6_4
fixed
perl-Compress-Raw-Zlib
RHEL 6
1:2.020-130.el6_4
fixed
perl-Compress-Zlib
RHEL 6
0:2.020-130.el6_4
fixed
perl-Digest-SHA
RHEL 6
1:5.47-130.el6_4
fixed
perl-ExtUtils-CBuilder
RHEL 6
1:0.27-130.el6_4
fixed
perl-ExtUtils-Embed
RHEL 6
0:1.28-130.el6_4
fixed
perl-ExtUtils-MakeMaker
RHEL 6
0:6.55-130.el6_4
fixed
perl-ExtUtils-ParseXS
RHEL 6
1:2.2003.0-130.el6_4
fixed
perl-File-Fetch
RHEL 6
0:0.26-130.el6_4
fixed
perl-IO-Compress-Base
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Compress-Bzip2
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Compress-Zlib
RHEL 6
0:2.020-130.el6_4
fixed
perl-IO-Zlib
RHEL 6
1:1.09-130.el6_4
fixed
perl-IPC-Cmd
RHEL 6
1:0.56-130.el6_4
fixed
perl-Locale-Maketext-Simple
RHEL 6
1:0.18-130.el6_4
fixed
perl-Log-Message
RHEL 6
1:0.02-130.el6_4
fixed
perl-Log-Message-Simple
RHEL 6
0:0.04-130.el6_4
fixed
perl-Module-Build
RHEL 6
1:0.3500-130.el6_4
fixed
perl-Module-CoreList
RHEL 6
0:2.18-130.el6_4
fixed
perl-Module-Load
RHEL 6
1:0.16-130.el6_4
fixed
perl-Module-Load-Conditional
RHEL 6
0:0.30-130.el6_4
fixed
perl-Module-Loaded
RHEL 6
1:0.02-130.el6_4
fixed
perl-Module-Pluggable
RHEL 6
1:3.90-130.el6_4
fixed
perl-Object-Accessor
RHEL 6
1:0.34-130.el6_4
fixed
perl-Package-Constants
RHEL 6
1:0.02-130.el6_4
fixed
perl-Params-Check
RHEL 6
1:0.26-130.el6_4
fixed
perl-Parse-CPAN-Meta
RHEL 6
1:1.40-130.el6_4
fixed
perl-Pod-Escapes
RHEL 6
1:1.04-130.el6_4
fixed
perl-Pod-Simple
RHEL 6
1:3.13-130.el6_4
fixed
perl-Term-UI
RHEL 6
0:0.20-130.el6_4
fixed
perl-Test-Harness
RHEL 6
0:3.17-130.el6_4
fixed
perl-Test-Simple
RHEL 6
0:0.92-130.el6_4
fixed
perl-Time-HiRes
RHEL 6
4:1.9721-130.el6_4
fixed
perl-Time-Piece
RHEL 6
0:1.15-130.el6_4
fixed
perl-core
RHEL 6
0:5.10.1-130.el6_4
fixed
perl-devel
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-libs
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-parent
RHEL 6
1:0.221-130.el6_4
fixed
perl-suidperl
RHEL 6
4:5.10.1-130.el6_4
fixed
perl-version
RHEL 6
3:0.77-130.el6_4
fixed
References