Perl regexec. c DoS Vulnerability (CVE-2015-8853)

Perl regexec. c DoS Vulnerability (CVE-2015-8853)
Perl regexec. c DoS Vulnerability (CVE-2015-8853)

Release date:
Updated on:

Affected Systems:

Perl <5.24.0

Description:

CVE (CAN) ID: CVE-2015-8853

Perl is a high-level, general, literal, and dynamic programming language.

In versions earlier than Perl 5.24.0, The S_reghop3, S_reghop4, and s_reg1_maybe3 functions in regexec. c have a security vulnerability. An attacker with an independent context can cause DoS by constructing UTF-8 data.

<* Source: Perl

*>

Suggestion:

Vendor patch:

Perl
----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://perl5.git.perl.org/perl.git/commitdiff/22b433eff9a1ffa2454e18405a56650f07b385b5

Https://rt.perl.org/Public/Bug/Display.html? Id = 123562

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1329106

Perl obtains cpu usage

Pop and push functions in Perl

[Perl script] finds the error information in the log and sends an email

Extract data from MySQL using Perl for statistical analysis code

Perl getting started version 6 clear Chinese PDF

Why did Perl 6 spend so much time developing?

Perl details: click here
Perl: click here

This article permanently updates the link address: