Unscored severity · published Feb 10, 2014
CVE-2010-4777
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a…
–
CVSS
6%
EPSS
No
On KEV
Description
The Perl_reg_numbered_buff_fetch function in Perl 5.10.0, 5.12.0, 5.14.0, and other versions, when running with debugging enabled, allows context-dependent attackers to cause a denial of service (assertion failure and application exit) via crafted input that is not properly handled when using certain regular expressions, as demonstrated by causing SpamAssassin and OCSInventory to crash.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.0% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PE
Perl · Perl
5.10; 5.12.0; 5.14.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4777
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4777
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628836
forums.ocsinventory-ng.org
http://forums.ocsinventory-ng.org/viewtopic.php?id=7215
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2011-05/msg00025.html
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=694166
listi.jpberlin.de
https://listi.jpberlin.de/pipermail/postfixbuch-users/2011-February/055885.html
More from Perl
9.8
CVE-2026-8376
Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when compiling regular expressions with a repeated fixed string on 32-bit builds
9.8
CVE-2026-4176
Perl versions from 5.9.4 before 5.40.4-RC1, from 5.41.0 before 5.42.2-RC1, from 5.43.0 before 5.43.9 contain a vulnerable version of Compress::Raw::Zlib
9.8
CVE-2022-48522
In Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation
9.8
CVE-2018-18314
Perl before 5.26.3 has a buffer overflow via a crafted regular expression that triggers invalid write operations
9.8
CVE-2018-18311
Perl before 5.26.3 and 5.28.x before 5.28.1 has a buffer overflow via a crafted regular expression that triggers invalid write operations