CVE-2011-2939 Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (...
MediumCVSS 5.1
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Off-by-one error in the decode_xs function in Unicode/Unicode.xs in the Encode module before 2.44, as used in Perl before 5.15.6, might allow context-dependent attackers to cause a denial of service (memory corruption) via a crafted Unicode string, which triggers a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libencode-perl(Debian:12) | < 2.44-1 | 2.44-1 |
| debian/libencode-perl(Debian:13) | < 2.44-1 | 2.44-1 |
| debian/libencode-perl(Debian:14) | < 2.44-1 | 2.44-1 |
| debian/perl(Debian:12) | < 5.12.4-4 | 5.12.4-4 |
| debian/perl(Debian:13) | < 5.12.4-4 | 5.12.4-4 |
| debian/perl(Debian:14) | < 5.12.4-4 | 5.12.4-4 |
| dan kogai encode module | <= 2.43 | No fix listed |
| dan kogai encode module | = 0.93 | No fix listed |
| dan kogai encode module | = 0.94 | No fix listed |
| dan kogai encode module | = 0.95 | No fix listed |
| dan kogai encode module | = 0.96 | No fix listed |
| dan kogai encode module | = 0.97 | No fix listed |
| dan kogai encode module | = 0.98 | No fix listed |
| dan kogai encode module | = 0.99 | No fix listed |
| dan kogai encode module | = 1.00 | No fix listed |
| dan kogai encode module | = 1.01 | No fix listed |
| dan kogai encode module | = 1.10 | No fix listed |
| dan kogai encode module | = 1.11 | No fix listed |
| dan kogai encode module | = 1.20 | No fix listed |
| dan kogai encode module | = 1.21 | No fix listed |
| dan kogai encode module | = 1.25 | No fix listed |
| dan kogai encode module | = 1.26 | No fix listed |
| dan kogai encode module | = 1.28 | No fix listed |
| dan kogai encode module | = 1.30 | No fix listed |
| dan kogai encode module | = 1.31 | No fix listed |
Show 157 more
| Product | Affected versions | Fixed in |
|---|---|---|
| dan kogai encode module | = 1.32 | No fix listed |
| dan kogai encode module | = 1.33 | No fix listed |
| dan kogai encode module | = 1.34 | No fix listed |
| dan kogai encode module | = 1.40 | No fix listed |
| dan kogai encode module | = 1.41 | No fix listed |
| dan kogai encode module | = 1.42 | No fix listed |
| dan kogai encode module | = 1.50 | No fix listed |
| dan kogai encode module | = 1.51 | No fix listed |
| dan kogai encode module | = 1.52 | No fix listed |
| dan kogai encode module | = 1.53 | No fix listed |
| dan kogai encode module | = 1.54 | No fix listed |
| dan kogai encode module | = 1.55 | No fix listed |
| dan kogai encode module | = 1.56 | No fix listed |
| dan kogai encode module | = 1.57 | No fix listed |
| dan kogai encode module | = 1.58 | No fix listed |
| dan kogai encode module | = 1.59 | No fix listed |
| dan kogai encode module | = 1.60 | No fix listed |
| dan kogai encode module | = 1.61 | No fix listed |
| dan kogai encode module | = 1.62 | No fix listed |
| dan kogai encode module | = 1.63 | No fix listed |
| dan kogai encode module | = 1.64 | No fix listed |
| dan kogai encode module | = 1.65 | No fix listed |
| dan kogai encode module | = 1.66 | No fix listed |
| dan kogai encode module | = 1.67 | No fix listed |
| dan kogai encode module | = 1.68 | No fix listed |
| dan kogai encode module | = 1.69 | No fix listed |
| dan kogai encode module | = 1.70 | No fix listed |
| dan kogai encode module | = 1.71 | No fix listed |
| dan kogai encode module | = 1.72 | No fix listed |
| dan kogai encode module | = 1.73 | No fix listed |
| dan kogai encode module | = 1.74 | No fix listed |
| dan kogai encode module | = 1.75 | No fix listed |
| dan kogai encode module | = 1.76 | No fix listed |
| dan kogai encode module | = 1.77 | No fix listed |
| dan kogai encode module | = 1.78 | No fix listed |
| dan kogai encode module | = 1.79 | No fix listed |
| dan kogai encode module | = 1.80 | No fix listed |
| dan kogai encode module | = 1.81 | No fix listed |
| dan kogai encode module | = 1.82 | No fix listed |
| dan kogai encode module | = 1.83 | No fix listed |
| dan kogai encode module | = 1.84 | No fix listed |
| dan kogai encode module | = 1.85 | No fix listed |
| dan kogai encode module | = 1.86 | No fix listed |
| dan kogai encode module | = 1.87 | No fix listed |
| dan kogai encode module | = 1.88 | No fix listed |
| dan kogai encode module | = 1.89 | No fix listed |
| dan kogai encode module | = 1.90 | No fix listed |
| dan kogai encode module | = 1.91 | No fix listed |
| dan kogai encode module | = 1.92 | No fix listed |
| dan kogai encode module | = 1.93 | No fix listed |
| dan kogai encode module | = 1.94 | No fix listed |
| dan kogai encode module | = 1.95 | No fix listed |
| dan kogai encode module | = 1.96 | No fix listed |
| dan kogai encode module | = 1.97 | No fix listed |
| dan kogai encode module | = 1.98 | No fix listed |
| dan kogai encode module | = 1.99 | No fix listed |
| dan kogai encode module | = 2.0 | No fix listed |
| dan kogai encode module | = 2.01 | No fix listed |
| dan kogai encode module | = 2.02 | No fix listed |
| dan kogai encode module | = 2.03 | No fix listed |
| dan kogai encode module | = 2.04 | No fix listed |
| dan kogai encode module | = 2.05 | No fix listed |
| dan kogai encode module | = 2.06 | No fix listed |
| dan kogai encode module | = 2.07 | No fix listed |
| dan kogai encode module | = 2.08 | No fix listed |
| dan kogai encode module | = 2.09 | No fix listed |
| dan kogai encode module | = 2.10 | No fix listed |
| dan kogai encode module | = 2.11 | No fix listed |
| dan kogai encode module | = 2.12 | No fix listed |
| dan kogai encode module | = 2.13 | No fix listed |
| dan kogai encode module | = 2.14 | No fix listed |
| dan kogai encode module | = 2.15 | No fix listed |
| dan kogai encode module | = 2.16 | No fix listed |
| dan kogai encode module | = 2.17 | No fix listed |
| dan kogai encode module | = 2.18 | No fix listed |
| dan kogai encode module | = 2.19 | No fix listed |
| dan kogai encode module | = 2.20 | No fix listed |
| dan kogai encode module | = 2.21 | No fix listed |
| dan kogai encode module | = 2.22 | No fix listed |
| dan kogai encode module | = 2.23 | No fix listed |
| dan kogai encode module | = 2.24 | No fix listed |
| dan kogai encode module | = 2.25 | No fix listed |
| dan kogai encode module | = 2.26 | No fix listed |
| dan kogai encode module | = 2.27 | No fix listed |
| dan kogai encode module | = 2.28 | No fix listed |
| dan kogai encode module | = 2.29 | No fix listed |
| dan kogai encode module | = 2.30 | No fix listed |
| dan kogai encode module | = 2.31 | No fix listed |
| dan kogai encode module | = 2.32 | No fix listed |
| dan kogai encode module | = 2.33 | No fix listed |
| dan kogai encode module | = 2.34 | No fix listed |
| dan kogai encode module | = 2.35 | No fix listed |
| dan kogai encode module | = 2.36 | No fix listed |
| dan kogai encode module | = 2.37 | No fix listed |
| dan kogai encode module | = 2.38 | No fix listed |
| dan kogai encode module | = 2.39 | No fix listed |
| dan kogai encode module | = 2.40 | No fix listed |
| dan kogai encode module | = 2.41 | No fix listed |
| dan kogai encode module | = 2.42 | No fix listed |
| perl | <= 5.14.2 | No fix listed |
| perl | = 5.8.1 | No fix listed |
| perl | = 5.8.2 | No fix listed |
| perl | = 5.8.3 | No fix listed |
| perl | = 5.8.4 | No fix listed |
| perl | = 5.8.5 | No fix listed |
| perl | = 5.8.6 | No fix listed |
| perl | = 5.8.7 | No fix listed |
| perl | = 5.8.8 | No fix listed |
| perl | = 5.8.9 | No fix listed |
| perl | = 5.8.10 | No fix listed |
| perl | = 5.9.2 | No fix listed |
| perl | = 5.10 | No fix listed |
| perl | = 5.10.0 | No fix listed |
| perl | = 5.10.0-rc1 | No fix listed |
| perl | = 5.10.0-rc2 | No fix listed |
| perl | = 5.10.1 | No fix listed |
| perl | = 5.10.1-rc1 | No fix listed |
| perl | = 5.10.1-rc2 | No fix listed |
| perl | = 5.11.0 | No fix listed |
| perl | = 5.11.1 | No fix listed |
| perl | = 5.11.2 | No fix listed |
| perl | = 5.11.3 | No fix listed |
| perl | = 5.11.4 | No fix listed |
| perl | = 5.11.5 | No fix listed |
| perl | = 5.12.0 | No fix listed |
| perl | = 5.12.0-rc0 | No fix listed |
| perl | = 5.12.0-rc1 | No fix listed |
| perl | = 5.12.0-rc2 | No fix listed |
| perl | = 5.12.0-rc3 | No fix listed |
| perl | = 5.12.0-rc4 | No fix listed |
| perl | = 5.12.0-rc5 | No fix listed |
| perl | = 5.12.1 | No fix listed |
| perl | = 5.12.1-rc1 | No fix listed |
| perl | = 5.12.1-rc2 | No fix listed |
| perl | = 5.12.2 | No fix listed |
| perl | = 5.12.2-rc1 | No fix listed |
| perl | = 5.12.3 | No fix listed |
| perl | = 5.12.3-rc1 | No fix listed |
| perl | = 5.12.3-rc2 | No fix listed |
| perl | = 5.12.3-rc3 | No fix listed |
| perl | = 5.13.0 | No fix listed |
| perl | = 5.13.1 | No fix listed |
| perl | = 5.13.2 | No fix listed |
| perl | = 5.13.3 | No fix listed |
| perl | = 5.13.4 | No fix listed |
| perl | = 5.13.5 | No fix listed |
| perl | = 5.13.6 | No fix listed |
| perl | = 5.13.7 | No fix listed |
| perl | = 5.13.8 | No fix listed |
| perl | = 5.13.9 | No fix listed |
| perl | = 5.13.10 | No fix listed |
| perl | = 5.13.11 | No fix listed |
| perl | = 5.14.0 | No fix listed |
| perl | = 5.14.0-rc1 | No fix listed |
| perl | = 5.14.0-rc2 | No fix listed |
| perl | = 5.14.0-rc3 | No fix listed |
| perl | = 5.14.1 | No fix listed |
References
- Debian Security Tracker CVE-2011-2939 vendor-advisory
- cpansearch.perl.org
- perl5.git.perl.org exploit patch
- search.cpan.org
- 46172 third-party-advisory
- 46989 third-party-advisory
- 51457 third-party-advisory
- 55314 third-party-advisory
- MDVSA-2012:008 vendor-advisory
- [oss-security] 20110818 CVE request: heap overflow in perl while decoding Unicode string mailing-list
- [oss-security] 20110819 Re: CVE request: heap overflow in perl while decoding Unicode string mailing-list patch
- RHSA-2011:1424 vendor-advisory
- 49858 vdb-entry
- USN-1643-1 vendor-advisory
- bugzilla.redhat.com patch
- bugs.debian.org issue-tracking