https://bugzilla.redhat.com/show_bug.cgi?id=1187149
Bug ID: 1187149
Summary: CVE-2013-7422 perl: segmentation fault in S_regmatch
on negative backreference
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: medium
Priority: medium
Assignee: security-response-team(a)redhat.com
Reporter: mprpic(a)redhat.com
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org,
perl-maint-list(a)redhat.com, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
rmeggins(a)redhat.com, tcallawa(a)redhat.com
An integer underflow flaw was discovered in the way Perl parsed regular
expression backreferences. An attacker able to supply a crafted regular
expression to a Perl application could possibly use this flaw to crash that
application.
Reproducer:
$ perl -e '/\7777777777/'
Segmentation fault
Upstream issue:
https://rt.perl.org/Public/Bug/Display.html?id=119505
Upstream patch:
http://perl5.git.perl.org/perl.git/commitdiff/0c2990d652e985784f095bba4bc...
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=WDfiMmElTR&a=cc_unsubscribe