VDB-107198 · CVE-2017-12814 · BID 101051

Perl up to 5.24.2/5.26.0 win32/perlhost.h CPerlHost::Add Environment Variable memory corruption

A vulnerability was found in Perl up to 5.24.2/5.26.0 (Programming Language Software). It has been rated as critical. Affected by this issue is the function CPerlHost::Add of the file win32/perlhost.h. Upgrading to version 5.24.3-RC1 or 5.26.1-RC1 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at perl5.git.perl.org. The best possible mitigation is suggested to be patching the affected component. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820236	01/14/2021	VulD...	cvss2_nvd_basescore	7.5	nist.gov	01/14/2021	accepted	90
10820235	01/14/2021	VulD...	person_name	John Leitch	securityfocus.com	01/14/2021	accepted	70
7143813	11/20/2019	VulD...	securityfocus_class	Boundary Condition Error	securityfocus.com	11/20/2019	accepted	100
7143812	11/20/2019	VulD...	securityfocus_date	1506556800 (09/28/2017)	securityfocus.com	11/20/2019	accepted	100
7143804	11/20/2019	VulD...	date	1506211200 (09/24/2017)		11/20/2019	accepted	100
7143801	11/20/2019	VulD...	confirm_url	https://perl5.git.perl.org/perl.git/log/refs/tags/v5.24.3-RC1	perl5.git.perl.org	11/20/2019	accepted	100
7143760	11/20/2019	VulD...	discoverydate	1505433600		11/20/2019	accepted	100
7143829	09/28/2017	VulD...	cvss3_nvd_basescore	9.8	nist.gov	09/28/2017	accepted	90
7143828	09/28/2017	VulD...	0day_days	9		09/28/2017	accepted	90
7143827	09/28/2017	VulD...	cvss3_vuldb_rc	C		09/28/2017	accepted	90
7143826	09/28/2017	VulD...	cvss3_vuldb_rl	O		09/28/2017	accepted	90
7143825	09/28/2017	VulD...	cvss3_vuldb_e	X		09/28/2017	accepted	90
7143824	09/28/2017	VulD...	cvss2_vuldb_rc	C		09/28/2017	accepted	90
7143823	09/28/2017	VulD...	cvss2_vuldb_rl	OF		09/28/2017	accepted	90
7143822	09/28/2017	VulD...	cvss2_vuldb_e	ND		09/28/2017	accepted	90
7143821	09/28/2017	VulD...	nessus_date	1506297600 (09/25/2017)	tenable.com	09/28/2017	accepted	100
7143820	09/28/2017	VulD...	nessus_type	local	tenable.com	09/28/2017	accepted	100
7143819	09/28/2017	VulD...	nessus_family	FreeBSD Local Security Checks	tenable.com	09/28/2017	accepted	100
7143818	09/28/2017	VulD...	nessus_risk	High	tenable.com	09/28/2017	accepted	100
7143817	09/28/2017	VulD...	nessus_filename	freebsd_pkg_d9e82328a12911e7987e4f174049b30a.nasl	tenable.com	09/28/2017	accepted	100