High · published June 5, 2020
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
| Product | Versions | Fixed in |
|---|---|---|
| perl/perl | < 5.30.3 | 5.30.3 |
| netapp/oncommand_workflow_automation | all versions | — |
| netapp/snap_creator_framework | all versions | — |
| fedoraproject/fedora | all versions | — |
| opensuse/leap | all versions | — |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_billing_and_revenue_management | all versions | — |
| oracle/communications_diameter_signaling_router | ≥ 8.0.0, ≤ 8.5.0 | — |
| oracle/communications_eagle_application_processor | ≥ 16.1.0, ≤ 16.4.0 | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_eagle_lnp_application_processor | all versions | — |
| oracle/communications_lsms | ≥ 13.1, ≤ 13.4 | — |
| oracle/communications_offline_mediation_controller | all versions | — |
| oracle/communications_performance_intelligence_center | ≥ 10.3.0.0.0, ≤ 10.3.0.2.1 | — |
| oracle/communications_performance_intelligence_center | ≥ 10.4.0.1.0, ≤ 10.4.0.3.1 | — |
| oracle/configuration_manager | all versions | — |
| oracle/enterprise_manager_base_platform | all versions | — |
| oracle/sd-wan_edge | all versions | — |
| oracle/sd-wan_edge | all versions | — |
| oracle/sd-wan_edge | all versions | — |
| oracle/tekelec_platform_distribution | ≥ 7.4.0, ≤ 7.7.1 | — |