Search/CVE-2020-10878

● CVE — High

CVE-2020-10878

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

View graph Watch Export

CVSS v3.1

8.6 HIGH

EPSS

4.88%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

CVSS v3.1 Detail

Attack VectorNETWORK

Attack ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

ScopeUNCHANGED

ConfidentialityLOW

IntegrityLOW

AvailabilityHIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Connections

18 relationships

oncommand workflow automation

source

communications billing and revenue management

source

communications diameter signaling router

source

communications eagle application processor

source

communications performance intelligence center

source

perl

source

enterprise manager base platform

source

snap creator framework

source

communications lsms

source

communications pricing design center

source

sd-wan aware

source

communications eagle lnp application processor

source

communications offline mediation controller

source

configuration manager

source

tekelec platform distribution

source

Timeline

disclosure → media coverage

Jun 5, 2020

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024