Description

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Remediation

References

CVE-2020-10878

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40600)

WordPress Plugin PWA for WP & AMP Security Bypass (1.7.32)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3597)

PHP Improper Input Validation Vulnerability (CVE-2008-3660)

Joomla! Core 3.x.x Security Bypass (3.0.0 - 3.9.24)

Severity

High

Classification

CVE-2020-10878 CWE-190 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Tags

Missing Update Known Vulnerabilities