CVE-2020-12723: perl +15 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-12723

CVSS 7.5 · High EPSS 6,0%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada perl, netapp oncommand workflow automation +14 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Rincian

Terbit di NVD: 5 Juni 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
EPSS (30 hari): 6,0% peluang dieksploitasi; lebih tinggi dari 93,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
perl	perl	Semua versi sebelum 5.30.3
netapp	oncommand workflow automation	Semua versi
netapp	snap creator framework	Semua versi
fedoraproject	fedora	Versi 31
opensuse	leap	Versi 15.1
oracle	communications billing and revenue management	Versi 12.0.0.2.0
oracle	communications billing and revenue management	Versi 12.0.0.3.0
oracle	communications diameter signaling router	Versi 8.0.0 hingga 8.5.0
oracle	communications eagle application processor	Versi 16.1.0 hingga 16.4.0
oracle	communications eagle lnp application processor	Versi 10.1
oracle	communications eagle lnp application processor	Versi 10.2
oracle	communications lsms	Versi 13.1 hingga 13.4
oracle	communications offline mediation controller	Versi 12.0.0.3.0
oracle	communications performance intelligence center	Versi 10.3.0.0.0 hingga 10.3.0.2.1
oracle	communications performance intelligence center	Versi 10.4.0.1.0 hingga 10.4.0.3.1
oracle	configuration manager	Versi 12.1.2.0.8
oracle	enterprise manager base platform	Versi 13.4.0.0
oracle	sd-wan edge	Versi 8.2
oracle	sd-wan edge	Versi 9.0
oracle	sd-wan edge	Versi 9.1
oracle	tekelec platform distribution	Versi 7.4.0 hingga 7.7.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 patch · advisory pihak ketiga
https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184a patch · advisory pihak ketiga
https://www.oracle.com//security-alerts/cpujul2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuApr2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuapr2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2021.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpujan2022.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2020.html patch · advisory pihak ketiga
https://www.oracle.com/security-alerts/cpuoct2021.html patch · advisory pihak ketiga
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html mailing list · advisory pihak ketiga
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod advisory pihak ketiga
https://github.com/Perl/perl5/issues/16947 advisory pihak ketiga
https://github.com/Perl/perl5/issues/17743 advisory pihak ketiga
https://security.gentoo.org/glsa/202006-03 advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200611-0001/ advisory pihak ketiga
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE...

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.