CVE-2020-10543

8.2 high Modified

Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.

Fix

Patch, vendor advisory and mitigation references on NVD 16

https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed Patch, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed Patch, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

2026-10-15 00:45First seenCVSS 8.2 · perl, fedoraproject, opensuseNVD modified 2026-10-14 09:17

Affected (CPE criteria) 22

cpe:2.3:a:perl:perl:*:*:*:*:*:*:x86:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_lsms:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:configuration_manager:12.1.2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_edge:8.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_edge:9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_edge:9.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*

References 29

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html Mailing List, Third Party Advisory
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod Third Party Advisory
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Third Party Advisory
https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
https://security.gentoo.org/glsa/202006-03 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200611-0001/ Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html Mailing List, Third Party Advisory
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod Third Party Advisory
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Third Party Advisory
https://github.com/perl/perl5/commit/897d1f7fd515b828e4b198d8b8bef76c6faf03ed Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
https://security.gentoo.org/glsa/202006-03 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200611-0001/ Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html