High · published June 5, 2020
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
| Product | Versions | Fixed in |
|---|---|---|
| perl/perl | < 5.30.3 | 5.30.3 |
| fedoraproject/fedora | all versions | — |
| opensuse/leap | all versions | — |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/snap_creator_framework | all versions | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_lsms | ≥ 13.1, ≤ 13.4 | — |
| oracle/communications_offline_mediation_controller | all versions | — |
| oracle/communications_performance_intelligence_center | ≥ 10.3.0.0.0, ≤ 10.3.0.2.1 | — |
| oracle/communications_performance_intelligence_center | ≥ 10.4.0.1.0, ≤ 10.4.0.3.1 | — |
| oracle/communications_pricing_design_center | all versions | — |
| oracle/configuration_manager | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/sd-wan_aware | all versions | — |
| oracle/sd-wan_aware | all versions | — |
| oracle/sd-wan_aware | all versions | — |
| oracle/tekelec_platform_distribution | ≥ 7.4.0, ≤ 7.7.1 | — |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_diameter_signaling_router | ≥ 8.0.0, ≤ 8.5.0 | — |
| oracle/communications_eagle_application_processor | ≥ 16.1.0, ≤ 16.4.0 | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |