CVE-2020-10543: perl +14 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-10543

CVSS 8.2 · High EPSS 11,3%

Kerentanan Integer Overflow or Wraparound pada perl, fedoraproject fedora +13 lainnya. Skor CVSS 3.1 8.2 (High) menurut NVD.

Deskripsi (NVD)

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

Rincian

Terbit di NVD: 5 Juni 2020
Terakhir diubah: 14 Oktober 2026
Status NVD: Modified
CVSS 3.1: 8.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-190: Integer Overflow or Wraparound
CWE-787: Out-of-bounds Write
EPSS (30 hari): 11,3% peluang dieksploitasi; lebih tinggi dari 95,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
perl	perl	Semua versi sebelum 5.30.3
fedoraproject	fedora	Versi 31
opensuse	leap	Versi 15.1
oracle	communications billing and revenue management	Versi 12.0.0.2.0
oracle	communications billing and revenue management	Versi 12.0.0.3.0
oracle	communications diameter signaling router	Versi 8.0.0 hingga 8.5.0
oracle	communications eagle application processor	Versi 16.1.0 hingga 16.4.0
oracle	communications eagle lnp application processor	Versi 10.1
oracle	communications eagle lnp application processor	Versi 10.2
oracle	communications eagle lnp application processor	Versi 46.7
oracle	communications eagle lnp application processor	Versi 46.8
oracle	communications eagle lnp application processor	Versi 46.9
oracle	communications lsms	Versi 13.1 hingga 13.4
oracle	communications offline mediation controller	Versi 12.0.0.3.0
oracle	communications performance intelligence center	Versi 10.3.0.0.0 hingga 10.3.0.2.1
oracle	communications performance intelligence center	Versi 10.4.0.1.0 hingga 10.4.0.3.1
oracle	communications pricing design center	Versi 12.0.0.3.0
oracle	configuration manager	Versi 12.1.2.0.8
oracle	enterprise manager base platform	Versi 13.4.0.0
oracle	sd-wan edge	Versi 8.2
oracle	sd-wan edge	Versi 9.0
oracle	sd-wan edge	Versi 9.1
oracle	tekelec platform distribution	Versi 7.4.0 hingga 7.7.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed patch · advisory pihak ketiga
https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html mailing list · advisory pihak ketiga
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod advisory pihak ketiga
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 advisory pihak ketiga
https://security.gentoo.org/glsa/202006-03 advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200611-0001/ advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE...
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 14 Okt 2026, 18:26 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.