perl vulnerabilities

Related Vulnerabilities: CVE-2017-12837   CVE-2017-12883  

Perl could be made to crash if it received specially crafted input.

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12837, CVE-2017-12883)

13 November 2017

perl vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 17.04
  • Ubuntu 16.04 LTS
  • Ubuntu 14.04 LTS

Summary

Perl could be made to crash if it received specially crafted input.

Software Description

  • perl - Practical Extraction and Report Language

Details

Jakub Wilk discovered that Perl incorrectly handled certain regular expressions. An attacker could use this issue to cause Perl to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2017-12837, CVE-2017-12883)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 17.04
perl - 5.24.1-2ubuntu1.1
Ubuntu 16.04 LTS
perl - 5.22.1-9ubuntu0.2
Ubuntu 14.04 LTS
perl - 5.18.2-2ubuntu1.3

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References