Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 483
Alerts This Week
Warning Icon 1 483

Gentoo: GLSA-200711-28 Moderate: Perl Buffer Overflow Risk

gentoo
Calendar Grey November 19, 2007
Scroller Gentoo
Gentoo GLSA 200711-28 details a Perl buffer overflow, emphasizing the risk of arbitrary code execution.
A buffer overflow in the Regular Expression engine in Perl possibly allows for the execution of arbitrary code.

Summary

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Gentoo Linux Security Advisory                           GLSA 200711-28
                                            https://security.gentoo.org/

  Severity: Normal
     Title: Perl: Buffer overflow
      Date: November 19, 2007
      Bugs: #198196
        ID: 200711-28


Synopsis
=======
A buffer overflow in the Regular Expression engine in Perl possibly
allows for the execution of arbitrary code.

Background
=========
Perl is a stable, cross-platform programming language created by Larry
Wall.

Affected packages
================
    -------------------------------------------------------------------
     Package        /  Vulnerable  /                        Unaffected
    -------------------------------------------------------------------
  1  dev-lang/perl     < 5.8.8-r4                          >= 5.8.8-r4

==========
Tavis Ormandy and Will Drewry (Google Security Team) discovered a
heap-based buffer overflow in the Regular Expression eng...
Read the Full Advisory
Topics%20covered

Topics Covered

security advisory moderate gentoo buffer overflow code execution perl regular expression

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory moderate gentoo buffer overflow code execution perl regular expression

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround