Wind River Support Network

HomeDefectsLIN8-12534
Acknowledged

LIN8-12534 : Security Advisory - perl - CVE-2020-10878

Created: Jun 8, 2020    Updated: Feb 19, 2021
Found In Version: 8.0.0.1
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

CREATE(Triage):(User=admin) [CVE-2020-10878|https://nvd.nist.gov/vuln/detail/CVE-2020-10878]
Live chat
Online