Risk | High |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-47038 |
CWE-ID | CWE-193 |
Exploitation vector | Network |
Public exploit | N/A |
Vulnerable software |
Anolis OS Operating systems & Components / Operating system perl-vmsish Operating systems & Components / Operating system package or component perl-vars Operating systems & Components / Operating system package or component perl-utils Operating systems & Components / Operating system package or component perl-subs Operating systems & Components / Operating system package or component perl-sort Operating systems & Components / Operating system package or component perl-sigtrap Operating systems & Components / Operating system package or component perl-podlators Operating systems & Components / Operating system package or component perl-perlfaq Operating systems & Components / Operating system package or component perl-parent Operating systems & Components / Operating system package or component perl-overloading Operating systems & Components / Operating system package or component perl-overload Operating systems & Components / Operating system package or component perl-open Operating systems & Components / Operating system package or component perl-meta-notation Operating systems & Components / Operating system package or component perl-macros Operating systems & Components / Operating system package or component perl-locale Operating systems & Components / Operating system package or component perl-local-lib Operating systems & Components / Operating system package or component perl-libnetcfg Operating systems & Components / Operating system package or component perl-libnet Operating systems & Components / Operating system package or component perl-less Operating systems & Components / Operating system package or component perl-inc-latest Operating systems & Components / Operating system package or component perl-if Operating systems & Components / Operating system package or component perl-homedir Operating systems & Components / Operating system package or component perl-generators Operating systems & Components / Operating system package or component perl-filetest Operating systems & Components / Operating system package or component perl-fields Operating systems & Components / Operating system package or component perl-experimental Operating systems & Components / Operating system package or component perl-encoding-warnings Operating systems & Components / Operating system package or component perl-doc Operating systems & Components / Operating system package or component perl-diagnostics Operating systems & Components / Operating system package or component perl-deprecate Operating systems & Components / Operating system package or component perl-debugger Operating systems & Components / Operating system package or component perl-constant Operating systems & Components / Operating system package or component perl-blib Operating systems & Components / Operating system package or component perl-bignum Operating systems & Components / Operating system package or component perl-base Operating systems & Components / Operating system package or component perl-autouse Operating systems & Components / Operating system package or component perl-autodie Operating systems & Components / Operating system package or component perl-User-pwent Operating systems & Components / Operating system package or component perl-Unicode-UCD Operating systems & Components / Operating system package or component perl-URI Operating systems & Components / Operating system package or component perl-Time-Local Operating systems & Components / Operating system package or component perl-Time Operating systems & Components / Operating system package or component perl-Tie-RefHash Operating systems & Components / Operating system package or component perl-Tie-Memoize Operating systems & Components / Operating system package or component perl-Tie-File Operating systems & Components / Operating system package or component perl-Tie Operating systems & Components / Operating system package or component perl-Thread-Semaphore Operating systems & Components / Operating system package or component perl-Thread-Queue Operating systems & Components / Operating system package or component perl-Thread Operating systems & Components / Operating system package or component perl-Text-Template Operating systems & Components / Operating system package or component perl-Text-Tabs+Wrap Operating systems & Components / Operating system package or component perl-Text-ParseWords Operating systems & Components / Operating system package or component perl-Text-Glob Operating systems & Components / Operating system package or component perl-Text-Diff Operating systems & Components / Operating system package or component perl-Text-Balanced Operating systems & Components / Operating system package or component perl-Text-Abbrev Operating systems & Components / Operating system package or component perl-Test-Simple Operating systems & Components / Operating system package or component perl-Test-Harness Operating systems & Components / Operating system package or component perl-Test Operating systems & Components / Operating system package or component perl-Term-Table Operating systems & Components / Operating system package or component perl-Term-ReadLine Operating systems & Components / Operating system package or component perl-Term-Complete Operating systems & Components / Operating system package or component perl-Term-Cap Operating systems & Components / Operating system package or component perl-Term-ANSIColor Operating systems & Components / Operating system package or component perl-Symbol Operating systems & Components / Operating system package or component perl-Sub-Install Operating systems & Components / Operating system package or component perl-Sub-Exporter Operating systems & Components / Operating system package or component perl-Software-License Operating systems & Components / Operating system package or component perl-SelfLoader Operating systems & Components / Operating system package or component perl-SelectSaver Operating systems & Components / Operating system package or component perl-Search-Dict Operating systems & Components / Operating system package or component perl-Safe Operating systems & Components / Operating system package or component perl-Pod-Usage Operating systems & Components / Operating system package or component perl-Pod-Simple Operating systems & Components / Operating system package or component perl-Pod-Perldoc Operating systems & Components / Operating system package or component perl-Pod-Parser Operating systems & Components / Operating system package or component perl-Pod-Html Operating systems & Components / Operating system package or component perl-Pod-Functions Operating systems & Components / Operating system package or component perl-Pod-Escapes Operating systems & Components / Operating system package or component perl-Pod-Checker Operating systems & Components / Operating system package or component perl-PerlIO-via-QuotedPrint Operating systems & Components / Operating system package or component perl-Perl-OSType Operating systems & Components / Operating system package or component perl-Params-Check Operating systems & Components / Operating system package or component perl-Package-Generator Operating systems & Components / Operating system package or component perl-Object-HashBase-tools Operating systems & Components / Operating system package or component perl-Object-HashBase Operating systems & Components / Operating system package or component perl-Net-Ping Operating systems & Components / Operating system package or component perl-Net Operating systems & Components / Operating system package or component perl-NEXT Operating systems & Components / Operating system package or component perl-Module-Metadata Operating systems & Components / Operating system package or component perl-Module-Loaded Operating systems & Components / Operating system package or component perl-Module-Load-Conditional Operating systems & Components / Operating system package or component perl-Module-Load Operating systems & Components / Operating system package or component perl-Module-CoreList-tools Operating systems & Components / Operating system package or component perl-Module-CoreList Operating systems & Components / Operating system package or component perl-Module-Build Operating systems & Components / Operating system package or component perl-Memoize Operating systems & Components / Operating system package or component perl-Math-Complex Operating systems & Components / Operating system package or component perl-Math-BigRat Operating systems & Components / Operating system package or component perl-Math-BigInt Operating systems & Components / Operating system package or component perl-MRO-Compat Operating systems & Components / Operating system package or component perl-Locale-Maketext-Simple Operating systems & Components / Operating system package or component perl-Locale-Maketext Operating systems & Components / Operating system package or component perl-JSON-PP Operating systems & Components / Operating system package or component perl-Importer Operating systems & Components / Operating system package or component perl-IPC-System-Simple Operating systems & Components / Operating system package or component perl-IPC-Open3 Operating systems & Components / Operating system package or component perl-IPC-Cmd Operating systems & Components / Operating system package or component perl-IO-Zlib Operating systems & Components / Operating system package or component perl-IO-Socket-IP Operating systems & Components / Operating system package or component perl-IO-Compress-Lzma Operating systems & Components / Operating system package or component perl-IO-Compress Operating systems & Components / Operating system package or component perl-I18N-LangTags Operating systems & Components / Operating system package or component perl-I18N-Collate Operating systems & Components / Operating system package or component perl-HTTP-Tiny Operating systems & Components / Operating system package or component perl-Getopt-Std Operating systems & Components / Operating system package or component perl-Getopt-Long Operating systems & Components / Operating system package or component perl-FindBin Operating systems & Components / Operating system package or component perl-Filter-Simple Operating systems & Components / Operating system package or component perl-FileHandle Operating systems & Components / Operating system package or component perl-FileCache Operating systems & Components / Operating system package or component perl-File-stat Operating systems & Components / Operating system package or component perl-File-Which Operating systems & Components / Operating system package or component perl-File-Temp Operating systems & Components / Operating system package or component perl-File-Path Operating systems & Components / Operating system package or component perl-File-HomeDir Operating systems & Components / Operating system package or component perl-File-Find Operating systems & Components / Operating system package or component perl-File-Fetch Operating systems & Components / Operating system package or component perl-File-Copy Operating systems & Components / Operating system package or component perl-File-Compare Operating systems & Components / Operating system package or component perl-File-Basename Operating systems & Components / Operating system package or component perl-Fedora-VSP Operating systems & Components / Operating system package or component perl-ExtUtils-ParseXS Operating systems & Components / Operating system package or component perl-ExtUtils-Miniperl Operating systems & Components / Operating system package or component perl-ExtUtils-Manifest Operating systems & Components / Operating system package or component perl-ExtUtils-MakeMaker Operating systems & Components / Operating system package or component perl-ExtUtils-MM-Utils Operating systems & Components / Operating system package or component perl-ExtUtils-Install Operating systems & Components / Operating system package or component perl-ExtUtils-Embed Operating systems & Components / Operating system package or component perl-ExtUtils-Constant Operating systems & Components / Operating system package or component perl-ExtUtils-Command Operating systems & Components / Operating system package or component perl-ExtUtils-CBuilder Operating systems & Components / Operating system package or component perl-Exporter Operating systems & Components / Operating system package or component perl-Env Operating systems & Components / Operating system package or component perl-English Operating systems & Components / Operating system package or component perl-Encode-Locale Operating systems & Components / Operating system package or component perl-Dumpvalue Operating systems & Components / Operating system package or component perl-DirHandle Operating systems & Components / Operating system package or component perl-Digest Operating systems & Components / Operating system package or component perl-Devel-SelfStubber Operating systems & Components / Operating system package or component perl-Data-Section Operating systems & Components / Operating system package or component perl-Data-OptList Operating systems & Components / Operating system package or component perl-DBM_Filter Operating systems & Components / Operating system package or component perl-Config-Perl-V Operating systems & Components / Operating system package or component perl-Config-Extensions Operating systems & Components / Operating system package or component perl-Class-Struct Operating systems & Components / Operating system package or component perl-Carp Operating systems & Components / Operating system package or component perl-CPAN-Meta-YAML Operating systems & Components / Operating system package or component perl-CPAN-Meta-Requirements Operating systems & Components / Operating system package or component perl-CPAN-Meta Operating systems & Components / Operating system package or component perl-CPAN-DistnameInfo Operating systems & Components / Operating system package or component perl-CPAN Operating systems & Components / Operating system package or component perl-Benchmark Operating systems & Components / Operating system package or component perl-AutoSplit Operating systems & Components / Operating system package or component perl-AutoLoader Operating systems & Components / Operating system package or component perl-Attribute-Handlers Operating systems & Components / Operating system package or component perl-Archive-Zip Operating systems & Components / Operating system package or component perl-Archive-Tar Operating systems & Components / Operating system package or component perl-Algorithm-Diff Operating systems & Components / Operating system package or component perl-version Operating systems & Components / Operating system package or component perl-threads-shared Operating systems & Components / Operating system package or component perl-threads Operating systems & Components / Operating system package or component perl-ph Operating systems & Components / Operating system package or component perl-mro Operating systems & Components / Operating system package or component perl-libs Operating systems & Components / Operating system package or component perl-lib Operating systems & Components / Operating system package or component perl-interpreter Operating systems & Components / Operating system package or component perl-encoding Operating systems & Components / Operating system package or component perl-devel Operating systems & Components / Operating system package or component perl-Unicode-Normalize Operating systems & Components / Operating system package or component perl-Unicode-Collate Operating systems & Components / Operating system package or component perl-Time-Piece Operating systems & Components / Operating system package or component perl-Time-HiRes Operating systems & Components / Operating system package or component perl-Sys-Syslog Operating systems & Components / Operating system package or component perl-Sys-Hostname Operating systems & Components / Operating system package or component perl-Storable Operating systems & Components / Operating system package or component perl-Socket Operating systems & Components / Operating system package or component perl-Scalar-List-Utils Operating systems & Components / Operating system package or component perl-PathTools Operating systems & Components / Operating system package or component perl-Params-Util Operating systems & Components / Operating system package or component perl-POSIX Operating systems & Components / Operating system package or component perl-Opcode Operating systems & Components / Operating system package or component perl-ODBM_File Operating systems & Components / Operating system package or component perl-NDBM_File Operating systems & Components / Operating system package or component perl-Math-BigInt-FastCalc Operating systems & Components / Operating system package or component perl-MIME-Base64 Operating systems & Components / Operating system package or component perl-IPC-SysV Operating systems & Components / Operating system package or component perl-IO Operating systems & Components / Operating system package or component perl-I18N-Langinfo Operating systems & Components / Operating system package or component perl-Hash-Util-FieldHash Operating systems & Components / Operating system package or component perl-Hash-Util Operating systems & Components / Operating system package or component perl-GDBM_File Operating systems & Components / Operating system package or component perl-Filter Operating systems & Components / Operating system package or component perl-File-DosGlob Operating systems & Components / Operating system package or component perl-Fcntl Operating systems & Components / Operating system package or component perl-Errno Operating systems & Components / Operating system package or component perl-Encode-devel Operating systems & Components / Operating system package or component perl-Encode Operating systems & Components / Operating system package or component perl-DynaLoader Operating systems & Components / Operating system package or component perl-Digest-SHA Operating systems & Components / Operating system package or component perl-Digest-MD5 Operating systems & Components / Operating system package or component perl-Devel-Size Operating systems & Components / Operating system package or component perl-Devel-Peek Operating systems & Components / Operating system package or component perl-Devel-PPPort Operating systems & Components / Operating system package or component perl-Data-Dumper Operating systems & Components / Operating system package or component perl-DB_File Operating systems & Components / Operating system package or component perl-Compress-Raw-Zlib Operating systems & Components / Operating system package or component perl-Compress-Raw-Lzma Operating systems & Components / Operating system package or component perl-Compress-Raw-Bzip2 Operating systems & Components / Operating system package or component perl-Compress-Bzip2 Operating systems & Components / Operating system package or component perl-B Operating systems & Components / Operating system package or component perl Operating systems & Components / Operating system package or component |
Vendor | OpenAnolis |
Security Bulletin
This security bulletin contains one high risk vulnerability.
EUVDB-ID: #VU83508
Risk: High
CVSSv4.0: 7.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2023-47038
CWE-ID:
CWE-193 - Off-by-one Error
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to an off-by-one error when processing regular expressions. A remote attacker can trigger an off-by-one error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsAnolis OS: 8
perl-vmsish: before 1.04-473
perl-vars: before 1.05-473
perl-utils: before 5.32.1-473
perl-subs: before 1.03-473
perl-sort: before 2.04-473
perl-sigtrap: before 1.09-473
perl-podlators: before 4.14-457
perl-perlfaq: before 5.20210520-1
perl-parent: before 0.238-457
perl-overloading: before 0.02-473
perl-overload: before 1.31-473
perl-open: before 1.12-473
perl-meta-notation: before 5.32.1-473
perl-macros: before 5.32.1-473
perl-locale: before 1.09-473
perl-local-lib: before 2.000024-7
perl-libnetcfg: before 5.32.1-473
perl-libnet: before 3.13-1
perl-less: before 0.03-473
perl-inc-latest: before 0.500-10
perl-if: before 0.60.800-473
perl-homedir: before 2.000024-7
perl-generators: before 1.13-1
perl-filetest: before 1.03-473
perl-fields: before 2.27-473
perl-experimental: before 0.025-1
perl-encoding-warnings: before 0.13-473
perl-doc: before 5.32.1-473
perl-diagnostics: before 1.37-473
perl-deprecate: before 0.04-473
perl-debugger: before 1.56-473
perl-constant: before 1.33-1001
perl-blib: before 1.07-473
perl-bignum: before 0.51-439
perl-base: before 2.27-473
perl-autouse: before 1.11-473
perl-autodie: before 2.34-1
perl-User-pwent: before 1.03-473
perl-Unicode-UCD: before 0.75-473
perl-URI: before 1.76-5
perl-Time-Local: before 1.300-4
perl-Time: before 1.03-473
perl-Tie-RefHash: before 1.39-473
perl-Tie-Memoize: before 1.1-473
perl-Tie-File: before 1.06-473
perl-Tie: before 4.6-473
perl-Thread-Semaphore: before 2.13-473
perl-Thread-Queue: before 3.14-457
perl-Thread: before 3.05-473
perl-Text-Template: before 1.58-1
perl-Text-Tabs+Wrap: before 2013.0523-396
perl-Text-ParseWords: before 3.30-396
perl-Text-Glob: before 0.11-5
perl-Text-Diff: before 1.45-7
perl-Text-Balanced: before 2.04-1
perl-Text-Abbrev: before 1.02-473
perl-Test-Simple: before 1.302181-2
perl-Test-Harness: before 3.42-2
perl-Test: before 1.31-473
perl-Term-Table: before 0.015-2
perl-Term-ReadLine: before 1.17-473
perl-Term-Complete: before 1.403-473
perl-Term-Cap: before 1.17-396
perl-Term-ANSIColor: before 5.01-458
perl-Symbol: before 1.08-473
perl-Sub-Install: before 0.928-15
perl-Sub-Exporter: before 0.987-17
perl-Software-License: before 0.103014-5
perl-SelfLoader: before 1.26-473
perl-SelectSaver: before 1.02-473
perl-Search-Dict: before 1.07-473
perl-Safe: before 2.41-473
perl-Pod-Usage: before 2.01-1
perl-Pod-Simple: before 3.42-1
perl-Pod-Perldoc: before 3.28.01-443
perl-Pod-Parser: before 1.63-1001
perl-Pod-Html: before 1.25-473
perl-Pod-Functions: before 1.13-473
perl-Pod-Escapes: before 1.07-396
perl-Pod-Checker: before 1.74-1
perl-PerlIO-via-QuotedPrint: before 0.09-1
perl-Perl-OSType: before 1.010-397
perl-Params-Check: before 0.38-396
perl-Package-Generator: before 1.106-12
perl-Object-HashBase-tools: before 0.009-4
perl-Object-HashBase: before 0.009-4
perl-Net-Ping: before 2.72-473
perl-Net: before 1.02-473
perl-NEXT: before 0.67-473
perl-Module-Metadata: before 1.000037-1
perl-Module-Loaded: before 0.08-473
perl-Module-Load-Conditional: before 0.74-1
perl-Module-Load: before 0.36-1
perl-Module-CoreList-tools: before 5.20211020-1
perl-Module-CoreList: before 5.20211020-1
perl-Module-Build: before 0.42.31-5
perl-Memoize: before 1.03-473
perl-Math-Complex: before 1.59-473
perl-Math-BigRat: before 0.2614-2
perl-Math-BigInt: before 1.9998.18-1
perl-MRO-Compat: before 0.13-5
perl-Locale-Maketext-Simple: before 0.21-473
perl-Locale-Maketext: before 1.29-440
perl-JSON-PP: before 4.04-2
perl-Importer: before 0.025-6
perl-IPC-System-Simple: before 1.30-3
perl-IPC-Open3: before 1.21-473
perl-IPC-Cmd: before 1.04-2
perl-IO-Zlib: before 1.10-473
perl-IO-Socket-IP: before 0.41-2
perl-IO-Compress-Lzma: before 2.096-1
perl-IO-Compress: before 2.096-1
perl-I18N-LangTags: before 0.44-473
perl-I18N-Collate: before 1.02-473
perl-HTTP-Tiny: before 0.078-1
perl-Getopt-Std: before 1.12-473
perl-Getopt-Long: before 2.52-1
perl-FindBin: before 1.51-473
perl-Filter-Simple: before 0.96-457
perl-FileHandle: before 2.03-473
perl-FileCache: before 1.10-473
perl-File-stat: before 1.09-473
perl-File-Which: before 1.23-4
perl-File-Temp: before 0.231.100-1
perl-File-Path: before 2.16-439
perl-File-HomeDir: before 1.004-6
perl-File-Find: before 1.37-473
perl-File-Fetch: before 1.00-1
perl-File-Copy: before 2.34-473
perl-File-Compare: before 1.100.600-473
perl-File-Basename: before 2.85-473
perl-Fedora-VSP: before 0.001-10
perl-ExtUtils-ParseXS: before 3.40-439
perl-ExtUtils-Miniperl: before 1.09-473
perl-ExtUtils-Manifest: before 1.73-1
perl-ExtUtils-MakeMaker: before 7.46-3
perl-ExtUtils-MM-Utils: before 7.46-3
perl-ExtUtils-Install: before 2.20-1
perl-ExtUtils-Embed: before 1.35-473
perl-ExtUtils-Constant: before 0.25-473
perl-ExtUtils-Command: before 7.46-3
perl-ExtUtils-CBuilder: before 0.280236-1
perl-Exporter: before 5.74-458
perl-Env: before 1.04-396
perl-English: before 1.11-473
perl-Encode-Locale: before 1.05-10
perl-Dumpvalue: before 2.27-473
perl-DirHandle: before 1.05-473
perl-Digest: before 1.20-1
perl-Devel-SelfStubber: before 1.06-473
perl-Data-Section: before 0.200007-8
perl-Data-OptList: before 0.110-7
perl-DBM_Filter: before 0.06-473
perl-Config-Perl-V: before 0.32-441
perl-Config-Extensions: before 0.03-473
perl-Class-Struct: before 0.66-473
perl-Carp: before 1.50-439
perl-CPAN-Meta-YAML: before 0.018-1001
perl-CPAN-Meta-Requirements: before 2.140-397
perl-CPAN-Meta: before 2.150010-397
perl-CPAN-DistnameInfo: before 0.12-13
perl-CPAN: before 2.28-5
perl-Benchmark: before 1.23-473
perl-AutoSplit: before 5.74-473
perl-AutoLoader: before 5.74-473
perl-Attribute-Handlers: before 1.01-473
perl-Archive-Zip: before 1.68-3
perl-Archive-Tar: before 2.38-3
perl-Algorithm-Diff: before 1.1903-10
perl-version: before 0.99.29-1
perl-threads-shared: before 1.61-457
perl-threads: before 2.25-457
perl-ph: before 5.32.1-473
perl-mro: before 1.23-473
perl-libs: before 5.32.1-473
perl-lib: before 0.65-473
perl-interpreter: before 5.32.1-473
perl-encoding: before 3.00-461
perl-devel: before 5.32.1-473
perl-Unicode-Normalize: before 1.27-458
perl-Unicode-Collate: before 1.29-1
perl-Time-Piece: before 1.3401-473
perl-Time-HiRes: before 1.9764-459
perl-Sys-Syslog: before 0.36-1
perl-Sys-Hostname: before 1.23-473
perl-Storable: before 3.21-457
perl-Socket: before 2.031-1
perl-Scalar-List-Utils: before 1.55-457
perl-PathTools: before 3.78-439
perl-Params-Util: before 1.102-2
perl-POSIX: before 1.94-473
perl-Opcode: before 1.48-473
perl-ODBM_File: before 1.16-473
perl-NDBM_File: before 1.15-473
perl-Math-BigInt-FastCalc: before 0.500.900-1
perl-MIME-Base64: before 3.15-1001
perl-IPC-SysV: before 2.09-1
perl-IO: before 1.43-473
perl-I18N-Langinfo: before 0.19-473
perl-Hash-Util-FieldHash: before 1.20-473
perl-Hash-Util: before 0.23-473
perl-GDBM_File: before 1.18-473
perl-Filter: before 1.60-1
perl-File-DosGlob: before 1.12-473
perl-Fcntl: before 1.13-473
perl-Errno: before 1.30-473
perl-Encode-devel: before 3.08-461
perl-Encode: before 3.08-461
perl-DynaLoader: before 1.47-473
perl-Digest-SHA: before 6.02-2
perl-Digest-MD5: before 2.58-1
perl-Devel-Size: before 0.83-3
perl-Devel-Peek: before 1.28-473
perl-Devel-PPPort: before 3.62-1
perl-Data-Dumper: before 2.174-440
perl-DB_File: before 1.855-1
perl-Compress-Raw-Zlib: before 2.096-2
perl-Compress-Raw-Lzma: before 2.096-1.0.1
perl-Compress-Raw-Bzip2: before 2.096-1
perl-Compress-Bzip2: before 2.28-2
perl-B: before 1.80-473
perl: before 5.32.1-473
CPE2.3https://anas.openanolis.cn/errata/detail/ANSA-2024:0478
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.