CVE-2007-5116

EPSS 4.83%
Veröffentlicht 07.11.2007 23:46:00
Zuletzt bearbeitet 16.06.2026 22:45:28
Erkennungen
Login

Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 56

NVD 14 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Larry Wall ≫ Perl Version 5.8.0

   Debian ≫ Debian Linux Version 3.1
   Debian ≫ Debian Linux Version 4.0
   Debian ≫ Debian Linux Version 4.0 Edition alpha
   Debian ≫ Debian Linux Version 4.0 Edition amd64
   Debian ≫ Debian Linux Version 4.0 Edition arm
   Debian ≫ Debian Linux Version 4.0 Edition hppa
   Debian ≫ Debian Linux Version 4.0 Edition ia-32
   Debian ≫ Debian Linux Version 4.0 Edition ia-64
   Debian ≫ Debian Linux Version 4.0 Edition m68k
   Debian ≫ Debian Linux Version 4.0 Edition mips
   Debian ≫ Debian Linux Version 4.0 Edition mipsel
   Debian ≫ Debian Linux Version 4.0 Edition powerpc
   Debian ≫ Debian Linux Version 4.0 Edition s390
   Debian ≫ Debian Linux Version 4.0 Edition sparc
   Mandrakesoft ≫ Mandrake Linux Version 2007
   Mandrakesoft ≫ Mandrake Linux Version 2007 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Version 2007.1
   Mandrakesoft ≫ Mandrake Linux Version 2007.1 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Version 2008.0
   Mandrakesoft ≫ Mandrake Linux Version 2008.0 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0
   Mandrakesoft ≫ Mandrake Linux Corporate Server Version 4.0 Edition x86_64
   Redhat ≫ Enterprise Linux Version 3.0 Edition as
   Redhat ≫ Enterprise Linux Version 3.0 Edition es
   Redhat ≫ Enterprise Linux Version 3.0 Edition ws
   Redhat ≫ Enterprise Linux Version 4.0 Edition as
   Redhat ≫ Enterprise Linux Version 4.0 Edition es
   Redhat ≫ Enterprise Linux Version 4.0 Edition ws
   Redhat ≫ Enterprise Linux Version 5.0 Edition client
   Redhat ≫ Enterprise Linux Version 5.0 Edition server
   Redhat ≫ Enterprise Linux Desktop Version 3.0
   Redhat ≫ Enterprise Linux Desktop Version 4.0
   Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64
   Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium_processor
   Rpath ≫ Rpath Linux Version 1

Larry Wall ≫ Perl Version 5.8.1

Larry Wall ≫ Perl Version 5.8.3

Larry Wall ≫ Perl Version 5.8.4

Larry Wall ≫ Perl Version 5.8.4.1

Larry Wall ≫ Perl Version 5.8.4.2

Larry Wall ≫ Perl Version 5.8.4.2.3

Larry Wall ≫ Perl Version 5.8.4.3

Larry Wall ≫ Perl Version 5.8.4.4

Larry Wall ≫ Perl Version 5.8.4.5

Larry Wall ≫ Perl Version 5.8.6

Mandrakesoft ≫ Mandrake Multi Network Firewall Version 2.0

Openpkg ≫ Openpkg Version current

Redhat ≫ Enterprise Linux Version 1.0 Edition application_stack

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.83%	0.908

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31208

http://www.ipcop.org/index.php?name=News&file=article&sid=41

http://docs.info.apple.com/article.html?artnum=307179

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/4238

ftp://aix.software.ibm.com/aix/efixes/security/README

http://secunia.com/advisories/27756

http://www.novell.com/linux/security/advisories/2007_24_sr.html

http://lists.vmware.com/pipermail/security-announce/2008/000002.html

http://secunia.com/advisories/28368

http://www.securityfocus.com/archive/1/485936/100/0/threaded

http://www.securityfocus.com/archive/1/486859/100/0/threaded

http://www.vmware.com/security/advisories/VMSA-2008-0001.html

http://www.vupen.com/english/advisories/2008/0064

http://marc.info/?l=bugtraq&m=120352263023774&w=2

http://secunia.com/advisories/27479

http://secunia.com/advisories/27515

http://secunia.com/advisories/27531

Vendor Advisory

http://secunia.com/advisories/27546

http://secunia.com/advisories/27548

http://secunia.com/advisories/27570

http://secunia.com/advisories/27613

http://secunia.com/advisories/27936

http://secunia.com/advisories/28167

http://secunia.com/advisories/28387

http://secunia.com/advisories/28993

http://secunia.com/advisories/29074

http://securitytracker.com/id?1018899

http://sunsolve.sun.com/search/document.do?assetkey=1-26-31524-1

http://sunsolve.sun.com/search/document.do?assetkey=1-66-231524-1

http://sunsolve.sun.com/search/document.do?assetkey=1-77-1018985.1-1

http://support.avaya.com/elmodocs2/security/ASA-2008-014.htm

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10220

http://www-1.ibm.com/support/docview.wss?uid=isg1IZ10244

http://www.debian.org/security/2007/dsa-1400

http://www.gentoo.org/security/en/glsa/glsa-200711-28.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2007:207

Patch

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.023.html

http://www.redhat.com/support/errata/RHSA-2007-0966.html

http://www.redhat.com/support/errata/RHSA-2007-1011.html

http://www.securityfocus.com/archive/1/483563/100/0/threaded

http://www.securityfocus.com/archive/1/483584/100/0/threaded

http://www.securityfocus.com/bid/26350

http://www.ubuntu.com/usn/usn-552-1

http://www.vupen.com/english/advisories/2007/3724

http://www.vupen.com/english/advisories/2007/4255

http://www.vupen.com/english/advisories/2008/0641

https://bugzilla.redhat.com/show_bug.cgi?id=323571

https://bugzilla.redhat.com/show_bug.cgi?id=378131

https://exchange.xforce.ibmcloud.com/vulnerabilities/38270

https://issues.rpath.com/browse/RPL-1813

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10669

https://nvd.nist.gov/vuln/detail/CVE-2007-5116

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-5116

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-5116

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-5116