CVE-2020-10878

8.6 high Modified

Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.

Fix

Patch, vendor advisory and mitigation references on NVD 20

https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c Patch, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c Patch, Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

2026-10-15 00:45First seenCVSS 8.6 · perl, fedoraproject, opensuseNVD modified 2026-10-14 09:17

Affected (CPE criteria) 24

cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.2.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:10.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.7:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.9:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_lsms:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*
cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:configuration_manager:12.1.2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_aware:8.2:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_aware:9.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:sd-wan_aware:9.1:*:*:*:*:*:*:*
cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*

References 31

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html Mailing List, Third Party Advisory
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod Third Party Advisory
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
https://security.gentoo.org/glsa/202006-03 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200611-0001/ Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html Mailing List, Third Party Advisory
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod Third Party Advisory
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 Patch, Third Party Advisory
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c Patch, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
https://security.gentoo.org/glsa/202006-03 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200611-0001/ Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html Patch, Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2021.html Patch, Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html