Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2010-4777

Date: February 10, 2014

The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.

Language: C

Severity Score

Related Resources (10)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836
https://security-tracker.debian.org/tracker/CVE-2010-4777
https://nvd.nist.gov/vuln/detail/CVE-2010-4777
https://bugzilla.redhat.com/show_bug.cgi?id=694166
https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html
http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html
http://forums.ocsinventory-ng.org/viewtopic.php?id=7215
https://rt.perl.org/Public/Bug/Display.html?id=76538
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
https://www.mend.io/vulnerability-database/CVE-2010-4777

Severity Score

Weakness Type (CWE)

Improper Input Validation

CWE-20

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): HIGH
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): LOW

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): MEDIUM
Authentication (AU): NONE
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): PARTIAL
Additional information:

Do you need more information?

Contact Us