CVE-2012-5195

perl: heap buffer overrun flaw may lead to arbitrary code execution

Published Dec 18, 2012 CVSS 2.0 · 7.5 High EPSS 4.9% KEV · Not listed
Description
Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2586-1 perl security update
EUVD EUVD EUVD-2012-5118 Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5 allows context-dependent attackers to cause a denial of service (memory consumption and crash) or possibly execute arbitrary code via the 'x' string repeat operator.
Ubuntu USN Ubuntu USN USN-1643-1 Perl vulnerabilities
History
Type Values Removed Values Added
Metrics epss

{'score': 0.02131}

epss

{'score': 0.03642}

Type Values Removed Values Added
Metrics epss

{'score': 0.02303}

epss

{'score': 0.02131}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 8:58 PM
Reserved
Sep 28, 2012, 12:00 AM
Status
Modified
Published
Dec 18, 2012, 12:55 AM
Modified
Jun 16, 2026, 11:46 PM
Severity
Moderate
Public date
Oct 10, 2012, 12:00 AM