CVE-2020-10878: perl +16 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-10878

CVSS 8.6 · High EPSS 4,9%

Kerentanan Integer Overflow or Wraparound pada perl, fedoraproject fedora +15 lainnya. Skor CVSS 3.1 8.6 (High) menurut NVD.

Deskripsi (NVD)

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Rincian

Terbit di NVD: 5 Juni 2020
Terakhir diubah: 14 Oktober 2026
Status NVD: Modified
CVSS 3.1: 8.6 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-190: Integer Overflow or Wraparound
EPSS (30 hari): 4,9% peluang dieksploitasi; lebih tinggi dari 91,8% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
perl	perl	Semua versi sebelum 5.30.3
fedoraproject	fedora	Versi 31
opensuse	leap	Versi 15.1
netapp	oncommand workflow automation	Semua versi
netapp	snap creator framework	Semua versi
oracle	communications billing and revenue management	Versi 12.0.0.2.0
oracle	communications billing and revenue management	Versi 12.0.0.3.0
oracle	communications diameter signaling router	Versi 8.0.0 hingga 8.5.0
oracle	communications eagle application processor	Versi 16.1.0 hingga 16.4.0
oracle	communications eagle lnp application processor	Versi 10.1
oracle	communications eagle lnp application processor	Versi 10.2
oracle	communications eagle lnp application processor	Versi 46.7
oracle	communications eagle lnp application processor	Versi 46.8
oracle	communications eagle lnp application processor	Versi 46.9
oracle	communications lsms	Versi 13.1 hingga 13.4
oracle	communications offline mediation controller	Versi 12.0.0.3.0
oracle	communications performance intelligence center	Versi 10.3.0.0.0 hingga 10.3.0.2.1
oracle	communications performance intelligence center	Versi 10.4.0.1.0 hingga 10.4.0.3.1
oracle	communications pricing design center	Versi 12.0.0.3.0
oracle	configuration manager	Versi 12.1.2.0.8
oracle	enterprise manager base platform	Versi 13.4.0.0
oracle	sd-wan aware	Versi 8.2
oracle	sd-wan aware	Versi 9.0
oracle	sd-wan aware	Versi 9.1
oracle	tekelec platform distribution	Versi 7.4.0 hingga 7.7.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 patch · advisory pihak ketiga
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 patch · advisory pihak ketiga
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c patch · advisory pihak ketiga
https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html mailing list · advisory pihak ketiga
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod advisory pihak ketiga
https://security.gentoo.org/glsa/202006-03 advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200611-0001/ advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE...
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 14 Okt 2026, 18:26 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.