CVE-2010-4777

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.

🔗 References (14)

• cve@mitrehttp://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836
• cve@mitrehttp://forums.ocsinventory-ng.org/viewtopic.php?id=7215
• cve@mitrehttp://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
• cve@mitrehttp://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html
• cve@mitrehttps://bugzilla.redhat.com/show_bug.cgi?id=694166
• cve@mitrehttps://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html
• cve@mitrehttps://rt.perl.org/Public/Bug/Display.html?id=76538
• af854a3a-2127-422b-91ae-364da2661108http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836
• af854a3a-2127-422b-91ae-364da2661108http://forums.ocsinventory-ng.org/viewtopic.php?id=7215
• af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
• af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html
• af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=694166
• af854a3a-2127-422b-91ae-364da2661108https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html
• af854a3a-2127-422b-91ae-364da2661108https://rt.perl.org/Public/Bug/Display.html?id=76538