National Cyber-Alert System

Vulnerability Summary for CVE-2008-1927

Overview

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2008-0013.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2008-0013.html

External Source: UBUNTU

Name: USN-700-2

Hyperlink:http://www.ubuntu.com/usn/usn-700-2

External Source: UBUNTU

Name: USN-700-1

Hyperlink:http://www.ubuntu.com/usn/usn-700-1

External Source: SECTRACK

Name: 1020253

Hyperlink:http://www.securitytracker.com/id?1020253

External Source: BUGTRAQ

Name: 20090120 rPSA-2009-0011-1 perl

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/500210/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0532

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0532.html

External Source: REDHAT

Name: RHSA-2008:0522

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0522.html

External Source: MANDRIVA

Name: MDVSA-2008:100

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:100

External Source: CONFIRM

Name: http://www.ipcop.org/index.php?name=News&file=article&sid=41

Hyperlink:http://www.ipcop.org/index.php?name=News&file=article&sid=41

External Source: VUPEN

Name: ADV-2009-0422

Hyperlink:http://www.frsirt.com/english/advisories/2009/0422

External Source: VUPEN

Name: ADV-2008-2424

Hyperlink:http://www.frsirt.com/english/advisories/2008/2424

External Source: VUPEN

Name: ADV-2008-2361

Hyperlink:http://www.frsirt.com/english/advisories/2008/2361

External Source: VUPEN

Name: ADV-2008-2265

Hyperlink:http://www.frsirt.com/english/advisories/2008/2265/references

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2009-0011

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2009-0011

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-361.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-317.htm

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3438

Hyperlink:http://support.apple.com/kb/HT3438

External Source: SECUNIA

Name: 33937

Hyperlink:http://secunia.com/advisories/33937

External Source: SECUNIA

Name: 33314

Hyperlink:http://secunia.com/advisories/33314

External Source: SECUNIA

Name: 31687

Hyperlink:http://secunia.com/advisories/31687

External Source: SECUNIA

Name: 31604

Hyperlink:http://secunia.com/advisories/31604

External Source: SECUNIA

Name: 31467

Hyperlink:http://secunia.com/advisories/31467

External Source: SECUNIA

Name: 31328

Hyperlink:http://secunia.com/advisories/31328

External Source: SECUNIA

Name: 31208

Hyperlink:http://secunia.com/advisories/31208

External Source: SECUNIA

Name: 30624

Hyperlink:http://secunia.com/advisories/30624

External Source: MISC

Name: http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156

Hyperlink:http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156

External Source: OSVDB

Name: 44588

Hyperlink:http://osvdb.org/44588

External Source: SUSE

Name: SUSE-SR:2008:017

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html

External Source: APPLE

Name: APPLE-SA-2009-02-12

Hyperlink:http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

External Source: CONFIRM

Name: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792

Hyperlink:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792

External Source: FEDORA

Name: FEDORA-2008-3399

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00607.html

External Source: FEDORA

Name: FEDORA-2008-3392

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00601.html

External Source: XF

Name: perl-utf8-dos(41996)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41996

External Source: BID

Name: 28928

Hyperlink:http://www.securityfocus.com/bid/28928

External Source: GENTOO

Name: GLSA-200805-17

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200805-17.xml

External Source: DEBIAN

Name: DSA-1556

Hyperlink:http://www.debian.org/security/2008/dsa-1556

External Source: SECUNIA

Name: 30326

Hyperlink:http://secunia.com/advisories/30326

External Source: SECUNIA

Name: 30025

Hyperlink:http://secunia.com/advisories/30025

External Source: SECUNIA

Name: 29948

Hyperlink:http://secunia.com/advisories/29948