USN-9006-1: perl vulnerability

Q: Who is exposed to this issue?

Systems that use Pod::Text to process POD documents are exposed when they process untrusted or attacker-controlled files. This can include automated workflows that parse supplied documentation files.

Q: What does an attacker need to exploit it?

An attacker needs to cause a user or automated system to process a specially crafted POD document containing deeply nested =over directives. Successful exploitation can exhaust CPU and memory, causing denial of service.

Published Nov 9, 2026

Updated

It was discovered that Pod::Text in Perl did not properly handle POD documents with deeply nested =over directives. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause CPU and memory exhaustion, resulting in a denial of service.

Affected Software

8 affected componentsFixes available

ubuntu/perl<5.18.2-2ubuntu1.7+esm10

5.18.2-2ubuntu1.7+esm10

ubuntu/perl<5.22.1-9ubuntu0.9+esm5

5.22.1-9ubuntu0.9+esm5

ubuntu/perl<5.26.1-6ubuntu0.7+esm5

5.26.1-6ubuntu0.7+esm5

ubuntu/perl<5.30.0-9ubuntu0.5+esm5

5.30.0-9ubuntu0.5+esm5

ubuntu/perl<5.34.0-3ubuntu1.10

5.34.0-3ubuntu1.10

ubuntu/perl<5.38.2-3.2ubuntu0.7

5.38.2-3.2ubuntu0.7

ubuntu/perl<5.42.3-1ubuntu0.1

5.42.3-1ubuntu0.1

ubuntu/perl<5.40.1-7ubuntu0.4

5.40.1-7ubuntu0.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.18.2-2ubuntu1.7+esm10
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.22.1-9ubuntu0.9+esm5
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.26.1-6ubuntu0.7+esm5
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.30.0-9ubuntu0.5+esm5
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.34.0-3ubuntu1.10
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.38.2-3.2ubuntu0.7
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.42.3-1ubuntu0.1
Upgrade
Upgrade ubuntu/perl to a version that resolves this vulnerability.
Fixed in 5.40.1-7ubuntu0.4

Event History

Nov 9, 2026

Advisory Published

via OSV·05:05 AM

Data Sourced

via OSV·05:05 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is exposed to this issue?

Systems that use Pod::Text to process POD documents are exposed when they process untrusted or attacker-controlled files. This can include automated workflows that parse supplied documentation files.

What does an attacker need to exploit it?

An attacker needs to cause a user or automated system to process a specially crafted POD document containing deeply nested =over directives. Successful exploitation can exhaust CPU and memory, causing denial of service.

USN-9006-1: perl vulnerability

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?