REDHAT-BUG-580605: Integer Overflow
First published: Thu Apr 08 2010(Updated: )
Bruce Merry reported: [1] <a href="http://bugs.gentoo.org/show_bug.cgi?id=313565">http://bugs.gentoo.org/show_bug.cgi?id=313565</a> an integer overflow, leading to stack overflow in the way Perl regular expression engine processed certain regular expression(s). Remote attacker could use this flaw to cause a denial of service (crash of an application, using the Perl regular expression engine). Public PoC from [1]: -------------------- perl -e 'if ((("a " x 100000) . "a\n") =~ /\A\S+(?: \S+)*\n\z/) {}'
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Perl |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-580605?
The severity of REDHAT-BUG-580605 is considered high due to the potential for remote attackers to exploit the vulnerability.
How do I fix REDHAT-BUG-580605?
You can fix REDHAT-BUG-580605 by updating to the latest patched version of Perl that addresses the integer overflow issue.
Who reported the vulnerability REDHAT-BUG-580605?
The vulnerability REDHAT-BUG-580605 was reported by Bruce Merry.
What type of vulnerability is REDHAT-BUG-580605?
REDHAT-BUG-580605 is classified as an integer overflow vulnerability leading to a stack overflow in the Perl regular expression engine.
What impact does REDHAT-BUG-580605 have on affected systems?
The impact of REDHAT-BUG-580605 on affected systems includes the potential for remote code execution through crafted regular expressions.
- agent/type
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-1158
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/perl
- canonical/perl