CVEvulnerability
CVE-2010-4777
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
Affected configurations
• perl perl 5.10
• perl perl 5.12.0
• perl perl 5.14.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836 bugs.debian.org
- http://forums.ocsinventory-ng.org/viewtopic.php?id=7215 forums.ocsinventory-ng.org
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html lists.opensuse.org
- https://bugzilla.redhat.com/show_bug.cgi?id=694166 bugzilla.redhat.com
- https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html listi.jpberlin.de
- https://rt.perl.org/Public/Bug/Display.html?id=76538 rt.perl.org
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836 bugs.debian.org
- http://forums.ocsinventory-ng.org/viewtopic.php?id=7215 forums.ocsinventory-ng.org
- http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html lists.opensuse.org
- https://bugzilla.redhat.com/show_bug.cgi?id=694166 bugzilla.redhat.com
- https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html listi.jpberlin.de
- https://rt.perl.org/Public/Bug/Display.html?id=76538 rt.perl.org