CVE-2007-5116
Fixed in a distro release EPSS 5%
Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attackers to execute arbitrary code by switching from byte to Unicode (UTF) characters in a regular expression.
Products: larry_wall perl, mandrakesoft mandrake_multi_network_firewall, openpkg, redhat enterprise_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | perl | 5.8.8-12 |
| Debian 13 | perl | 5.8.8-12 |
| Debian 14 | perl | 5.8.8-12 |
| Debian 3.1 | perl | 5.8.4-8sarge6 |
| Debian 4.0 | perl | 5.8.8-7etch1 |
| Debian 5.0 | perl | 5.8.8-11.1+lenny1 |
| Red Hat certificate system 7.3 | ant | 0:1.6.5-1jpp_1rh |
| Red Hat certificate system 7.3 | avalon-logkit | 0:1.2-2jpp_4rh |
| Red Hat certificate system 7.3 | axis | 0:1.2.1-1jpp_3rh |
| Red Hat certificate system 7.3 | classpathx-jaf | 0:1.0-2jpp_6rh |
| Red Hat certificate system 7.3 | classpathx-mail | 0:1.1.1-2jpp_8rh |
| Red Hat certificate system 7.3 | geronimo-ejb-2.1-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-j2ee-1.4-apis | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-j2ee-connector-1.5-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-j2ee-deployment-1.1-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-j2ee-management-1.0-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-jms-1.1-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-jsp-2.0-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-jta-1.0.1B-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-servlet-2.4-api | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-specs | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | geronimo-specs-javadoc | 0:1.0-0.M4.1jpp_10rh |
| Red Hat certificate system 7.3 | jakarta-commons-modeler | 0:2.0-3jpp_2rh |
| Red Hat certificate system 7.3 | log4j | 0:1.2.12-1jpp_1rh |
| Red Hat certificate system 7.3 | mx4j | 1:3.0.1-1jpp_4rh |
| Red Hat certificate system 7.3 | pcsc-lite | 0:1.3.3-3.el4 |
| Red Hat certificate system 7.3 | pcsc-lite-debuginfo | 0:1.3.3-3.el4 |
| Red Hat certificate system 7.3 | pcsc-lite-doc | 0:1.3.3-3.el4 |
| Red Hat certificate system 7.3 | pcsc-lite-libs | 0:1.3.3-3.el4 |
| Red Hat certificate system 7.3 | rhpki-ca | 0:7.3.0-20.el4 |
| Red Hat certificate system 7.3 | rhpki-java-tools | 0:7.3.0-10.el4 |
| Red Hat certificate system 7.3 | rhpki-kra | 0:7.3.0-14.el4 |
| Red Hat certificate system 7.3 | rhpki-manage | 0:7.3.0-19.el4 |
| Red Hat certificate system 7.3 | rhpki-native-tools | 0:7.3.0-6.el4 |
| Red Hat certificate system 7.3 | rhpki-ocsp | 0:7.3.0-13.el4 |
| Red Hat certificate system 7.3 | rhpki-tks | 0:7.3.0-13.el4 |
| Red Hat certificate system 7.3 | tomcat5 | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | tomcat5-common-lib | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | tomcat5-jasper | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | tomcat5-jsp-2.0-api | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | tomcat5-server-lib | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | tomcat5-servlet-2.4-api | 0:5.5.23-0jpp_4rh.16 |
| Red Hat certificate system 7.3 | xerces-j2 | 0:2.7.1-1jpp_1rh |
| Red Hat certificate system 7.3 | xml-commons | 0:1.3.02-2jpp_1rh |
| Red Hat certificate system 7.3 | xml-commons-apis | 0:1.3.02-2jpp_1rh |
| Red Hat Enterprise Linux 3 | perl | 2:5.8.0-97.EL3 |
| Red Hat Enterprise Linux 3 | perl-CGI | 2:2.89-97.EL3 |
| Red Hat Enterprise Linux 3 | perl-CPAN | 2:1.61-97.EL3 |
| Red Hat Enterprise Linux 3 | perl-DB_File | 2:1.806-97.EL3 |
| Red Hat Enterprise Linux 3 | perl-debuginfo | 2:5.8.0-97.EL3 |
| Red Hat Enterprise Linux 3 | perl-suidperl | 2:5.8.0-97.EL3 |
| Red Hat Enterprise Linux 4 | perl | 3:5.8.5-36.el4_5.2 |
| Red Hat Enterprise Linux 4 | perl-debuginfo | 3:5.8.5-36.el4_5.2 |
| Red Hat Enterprise Linux 4 | perl-suidperl | 3:5.8.5-36.el4_5.2 |
| Red Hat Enterprise Linux 5 | perl | 4:5.8.8-10.el5_0.2 |
| Red Hat Enterprise Linux 5 | perl-debuginfo | 4:5.8.8-10.el5_0.2 |
| Red Hat Enterprise Linux 5 | perl-suidperl | 4:5.8.8-10.el5_0.2 |
| Red Hat rhel application stack 1 | perl | 4:5.8.8-5.el4s1_2 |
| Red Hat rhel application stack 1 | perl-debuginfo | 4:5.8.8-5.el4s1_2 |
| Red Hat rhel application stack 1 | perl-suidperl | 4:5.8.8-5.el4s1_2 |
| openSUSE Tumbleweed | perl | 5.34.0-1.1 |