REDHAT-BUG-912276: Medium severity perl 5.30.0 vulnerability
A denial of service flaw was found in the way Perl's rehashing code implementation (responsible for recalculation of hash keys and redistribution of hash content) used to react on certain user's input. If a Perl language based application accepted untrusted user input as hash keys, an attacker could use this flaw to cause the perl executable to consume excessive amount of memory (a denial of service via memory exhaustion).
References: [1] http://www.nntp.perl.org/group/perl.perl5.porters/2013/03/msg199755.html
Affected Software
Event History
Frequently Asked Questions
What are the potential impacts of REDHAT-BUG-912276?
The vulnerability can lead to denial of service attacks by destabilizing Perl applications that handle untrusted user input as hash keys.
How can I mitigate the risks associated with REDHAT-BUG-912276?
To mitigate the risks, ensure that your Perl applications properly validate and sanitize all user inputs before processing them.
What versions of Perl are affected by REDHAT-BUG-912276?
The vulnerability affects versions of Perl that allow untrusted user input in their hashing code implementation.
Is there an official patch available for REDHAT-BUG-912276?
Yes, official patches or updates to address REDHAT-BUG-912276 should be obtained from the Perl development team or your package manager.
How can I check if my application is vulnerable to REDHAT-BUG-912276?
To check for vulnerabilities, review your application's code for instances where untrusted user input is used as hash keys in Perl.