#VU32721 Heap-based buffer overflow in Perl - CVE-2012-5195

Vulnerability identifier: #VU32721

Vulnerability risk: High

CVSSv4.0: 8.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2012-5195

CWE-ID: CWE-122

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Perl
Universal components / Libraries / Scripting languages

Vendor: Perl

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the Perl_repeatcpy function in util.c in Perl 5.12.x before 5.12.5, 5.14.x before 5.14.3, and 5.15.x before 15.15.5. A remote attacker can use the to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Perl: 5.12.0 - 5.12.4, 5.13.0 - 5.13.11, 5.14.0 - 5.14.2, 5.15 - 5.15.4

---

External links
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
https://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735
https://perl5.git.perl.org/perl.git/commit/2709980d5a193ce6f3a16f0d19879a6560dcde44
https://rhn.redhat.com/errata/RHSA-2013-0685.html
https://secunia.com/advisories/51457
https://secunia.com/advisories/55314
https://www.debian.org/security/2012/dsa-2586
https://www.mandriva.com/security/advisories?name=MDVSA-2013:113
https://www.nntp.perl.org/group/perl.perl5.porters/2012/10/msg193886.html
https://www.openwall.com/lists/oss-security/2012/10/26/2
https://www.openwall.com/lists/oss-security/2012/10/27/1
https://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
https://www.securityfocus.com/bid/56287
https://www.ubuntu.com/usn/USN-1643-1
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0352

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.