InfraGuard
Iniciar sesión Pruébalo ahora Comprar ahora

Vulnerabilidades de Perl (lista de CVE)

46 CVE9.8 CVSS máx.
Comprueba tu versiónperl -v

Ramas de versiones afectadas

Vulnerabilidades conocidas

CVE Título Versiones afectadas CVSS Explotada EPSS Publicación
CVE-2026-13221 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently in... ≤ 5.43.9 9.1 — 2026-07-14
CVE-2026-57432 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have an integer ove... ≤ 5.43.10 8.4 — 2026-07-14
CVE-2026-8376 Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer... ≤ 5.43.10 7.3 — 2026-05-26
CVE-2026-4176 Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a... ≥ 5.9.4 < 5.40.4 ≥ 5.41.0 < 5.42.2 ≥ 5.43.0 < 5.43.9 9.8 — 2026-03-30
CVE-2024-56406 Perl is vulnerable to a heap buffer overflow when transliterating non-ASCII bytes ≥ 5.33.1 < 5.38.4 ≥ 5.39.0 < 5.40.2 ≥ 5.41.0 ≤ 5.41.10 8.4 — 2025-04-13
CVE-2023-47039 Perl: perl for windows binary hijacking vulnerability < 5.32.1 7.8 — 2024-01-02
CVE-2023-47038 Perl: write past buffer end via illegal user-defined unicode property ≥ 5.30.0 ≤ 5.38.0 7.0 — 2023-12-18
CVE-2022-48522 In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execut... = 5.34.0 9.8 — 2023-08-22
CVE-2023-31484 CPAN.pm before 2.35 does not verify TLS certificates when downloading distributions over HTTPS. < 5.38.0 8.1 — 2023-04-28
CVE-2023-31486 HTTP::Tiny before 0.083, a Perl core module since 5.13.9 and available standalone on CPAN, has an insecure def... < 5.38.0 8.1 — 2023-04-28
CVE-2020-12723 regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive... < 5.30.3 7.5 — 2020-06-05
CVE-2020-10878 Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situatio... < 5.30.3 8.6 — 2020-06-05
CVE-2020-10543 Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression q... < 5.30.3 8.2 — 2020-06-05
CVE-2018-18311 Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that trigge... < 5.26.3 ≥ 5.28.0 < 5.28.1 9.8 — 2018-12-08
CVE-2018-18313 Perl before 5.26.3 has a buffer over-read via a crafted regular expression that triggers disclosure of sensiti... < 5.26.3 9.1 — 2018-12-08
CVE-2018-18314 Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operatio... < 5.26.3 9.8 — 2018-12-08
CVE-2018-18312 Perl before 5.26.3 and 5.28.0 before 5.28.1 has a buffer overflow via a crafted regular expression that trigge... < 5.26.3 ≥ 5.28.0 < 5.28.1 9.8 — 2018-12-06
CVE-2018-12015 In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protec... ≤ 5.26.2 7.5 — 2018-06-07
CVE-2018-6797 An issue was discovered in Perl 5.18 through 5.26. A crafted regular expression can cause a heap-based buffer... ≥ 5.18 ≤ 5.26 9.8 — 2018-04-18
CVE-2018-6798 An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can... ≥ 5.22 ≤ 5.26 7.5 — 2018-04-18
CVE-2018-6913 Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to ex... < 5.26.2 9.8 — 2018-04-18
CVE-2017-12814 Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.2... ≤ 5.24.2 = 5.26.0 9.8 — 2017-09-28
CVE-2017-12837 Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x befor... ≤ 5.24.2 = 5.26.0 7.5 — 2017-09-20
CVE-2017-12883 Buffer overflow in the S_grok_bslash_N function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.2... ≤ 5.24.2 = 5.26.0 9.1 — 2017-09-20
CVE-2015-8608 The VDir::MapPathA and VDir::MapPathW functions in Perl 5.22 allow remote attackers to cause a denial of servi... = 5.22 9.8 — 2017-02-08
CVE-2016-1238 (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/... = 1.0.15 = 1.0.16 = 5.000 7.8 — 2016-08-02
CVE-2016-6185 The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval,... ≥ 5.23.0 < 5.24.1 ≥ 5.25.0 < 5.25.3 7.8 — 2016-08-02
CVE-2015-8853 The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow co... ≤ 5.23.9 7.5 — 2016-05-26
CVE-2016-2381 Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via d... < 5.23.9 7.5 — 2016-04-09
CVE-2013-7422 Integer underflow in regcomp.c in Perl before 5.20, as used in Apple OS X before 10.10.5 and other products, a... = 5.18.4 7.5 — 2015-08-17
CVE-2014-4330 The Dumper method in Data::Dumper before 2.154, as used in Perl 5.20.1 and earlier, allows context-dependent a... ≤ 5.20.1 2.1 — 2014-10-01
CVE-2010-4777 The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running wit... = 5.10 = 5.12.0 = 5.14.0 4.3 — 2014-02-11
CVE-2013-1667 The rehash mechanism in Perl 5.8.2 through 5.16.x allows context-dependent attackers to cause a denial of serv... = 5.8.2 = 5.8.3 = 5.8.4 7.5 — 2013-03-13

Controla estas versiones en tus propios servidores

InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.

Prueba la demo en vivo Comprar ahora

Resumen semanal de vulnerabilidades explotadas

Las incorporaciones a KEV relevantes para servidores autoalojados, una vez por semana. Ningún otro correo.

Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).