CVE-2018-6798

An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 82%
Affected Products (NVD)
VendorProductVersion
debiandebian_linux
7.0
debiandebian_linux
8.0
debiandebian_linux
9.0
perlperl
5.22 ≤
𝑥
≤ 5.26
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
17.10
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server
7.0
redhatenterprise_linux_server
7.3
redhatenterprise_linux_server
7.4
redhatenterprise_linux_server
7.5
redhatenterprise_linux_workstation
6.0
redhatenterprise_linux_workstation
7.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
perl
bookworm
5.36.0-7+deb12u1
fixed
bullseye
5.32.1-4+deb11u3
fixed
bullseye (security)
5.32.1-4+deb11u4
fixed
jessie
not-affected
sid
5.40.0-6
fixed
trixie
5.40.0-6
fixed
wheezy
not-affected
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
perl
artful
Fixed 5.26.0-8ubuntu1.1
released
trusty
not-affected
xenial
Fixed 5.22.1-9ubuntu0.3
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
perl
suse enterprise desktop 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise sap 12 SP1
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP2
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP3
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.20.1
fixed
suse enterprise sap 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise server 12
5.18.2-12.14.1
fixed
suse enterprise server 12 SP1
5.18.2-12.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.14.1
fixed
suse enterprise server 12 SP3
5.18.2-12.14.1
fixed
suse enterprise server 12 SP5
5.18.2-12.20.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.17.1
fixed
perl-32bit
suse enterprise sap 12 SP1
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP2
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP3
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.20.1
fixed
suse enterprise server 12
5.18.2-12.14.1
fixed
suse enterprise server 12 SP1
5.18.2-12.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.14.1
fixed
suse enterprise server 12 SP3
5.18.2-12.14.1
fixed
suse enterprise server 12 SP5
5.18.2-12.20.1
fixed
perl-base
suse enterprise desktop 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise sap 12 SP1
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP2
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP3
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.20.1
fixed
suse enterprise sap 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise server 12
5.18.2-12.14.1
fixed
suse enterprise server 12 SP1
5.18.2-12.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.14.1
fixed
suse enterprise server 12 SP3
5.18.2-12.14.1
fixed
suse enterprise server 12 SP5
5.18.2-12.20.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.17.1
fixed
perl-base-32bit
suse enterprise desktop 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.17.1
fixed
perl-core-DB_File
suse enterprise desktop 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise desktop 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP7
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP5
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP6
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP7
5.26.1-150300.17.17.1
fixed
perl-doc
suse enterprise sap 12 SP1
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP2
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP3
5.18.2-12.14.1
fixed
suse enterprise sap 12 SP5
5.18.2-12.20.1
fixed
suse enterprise sap 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise sap 15 SP4
5.26.1-150300.17.17.1
fixed
suse enterprise server 12
5.18.2-12.14.1
fixed
suse enterprise server 12 SP1
5.18.2-12.14.1
fixed
suse enterprise server 12 SP2
5.18.2-12.14.1
fixed
suse enterprise server 12 SP3
5.18.2-12.14.1
fixed
suse enterprise server 12 SP5
5.18.2-12.20.1
fixed
suse enterprise server 15 SP2
5.26.1-150000.7.18.1
fixed
suse enterprise server 15 SP3
5.26.1-150300.17.17.1
fixed
suse enterprise server 15 SP4
5.26.1-150300.17.17.1
fixed