CVE-2020-10878
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Perl是Perl（PERL）社区的一款通用、解释型、动态的跨平台编程语言。 Perl 5.30.3之前版本中存在输入验证错误漏洞，该漏洞源于程序未正确处理"PL_regkind[OP(n)] == NOTHING" 情况。攻击者可借助特制的正则表达式利用该漏洞注入指令。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-10878
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Perl 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Perl是Perl（PERL）社区的一款通用、解释型、动态的跨平台编程语言。 Perl 5.30.3之前版本中存在输入验证错误漏洞，该漏洞源于程序未正确处理"PL_regkind[OP(n)] == NOTHING" 情况。攻击者可借助特制的正则表达式利用该漏洞注入指令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2020-10878
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-10878
请登录查看更多情报信息。
Patches & Fixes for CVE-2020-10878 (2)
-
https://github.com/perl/perl5/commit/3295b48defa0f8570114877b063fe546dd348b3c x_refsource_CONFIRM
-
https://github.com/perl/perl5/commit/0a320d753fe7fca03df259a4dfd8e641e51edaa8 x_refsource_CONFIRM
Vendor Advisories for CVE-2020-10878 (9)
-
https://www.oracle.com/security-alerts/cpujan2022.html x_refsource_MISC
-
https://www.oracle.com/security-alerts/cpujan2021.html x_refsource_MISC
-
https://www.oracle.com/security-alerts/cpuApr2021.html x_refsource_MISC
-
https://www.oracle.com/security-alerts/cpuoct2021.html x_refsource_MISC
-
https://www.oracle.com//security-alerts/cpujul2021.html x_refsource_MISC
-
https://security.netapp.com/advisory/ntap-20200611-0001/ x_refsource_CONFIRM
-
https://www.oracle.com/security-alerts/cpuoct2020.html x_refsource_MISC
-
https://www.oracle.com/security-alerts/cpuapr2022.html x_refsource_MISC
-
Mailing List Discussions for CVE-2020-10878 (2)
-
http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html vendor-advisory x_refsource_SUSE
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/ vendor-advisory x_refsource_FEDORA
Other References for CVE-2020-10878 (2)
-
https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3 x_refsource_CONFIRM
-
https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod x_refsource_CONFIRM
Same Patch Batch · n/a · 2020-06-05 · 18 CVEs total
| CVE-2020-13867 | Open-iSCSI targetcli-fb 安全漏洞 | |
| CVE-2020-13865 | WordPress Elementor Page Builder 跨站脚本漏洞 | |
| CVE-2020-13864 | WordPress Elementor Page Builder 跨站脚本漏洞 | |
| CVE-2020-11696 | Combodo iTop 跨站脚本漏洞 | |
| CVE-2020-11697 | Combodo iTop 跨站脚本漏洞 | |
| CVE-2020-13646 | Cheetah free wifi 输入验证错误漏洞 | |
| CVE-2020-13868 | Pixel＆Tonic Craft CMS Comments plugin 跨站请求伪造漏洞 | |
| CVE-2020-13869 | Pixel＆Tonic Craft CMS Comments plugin 跨站脚本漏洞 | |
| CVE-2020-13870 | Pixel＆Tonic Craft CMS Comments plugin 跨站脚本漏洞 | |
| CVE-2020-12849 | Abstrium Pydio Cells 跨站脚本漏洞 | |
| CVE-2020-12723 | Perl 安全漏洞 | |
| CVE-2020-1883 | Huawei NIP6800、Secospace USG6600和USG9500 安全漏洞 | |
| CVE-2020-9074 | Huawei Honor 20 PRO、Honor View 20和Honor 20 安全漏洞 | |
| CVE-2020-11975 | Apache Unomi 输入验证错误漏洞 | |
| CVE-2020-10543 | Perl 输入验证错误漏洞 | |
| CVE-2020-11492 | Docker 竞争条件问题漏洞 | |
| CVE-2020-12848 | Abstrium Pydio Cells 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-109828
libsndfile WAV Parsing wavlike.c wavlike_subchunk_parse unin -
CVE-2026-109827
GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write -
CVE-2026-109519
YouTransfer Template Rendering template path traversal -
CVE-2026-109160
PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigCo -
CVE-2026-109155
DeepPavlov Model Download untar path traversal
V. Comments for CVE-2020-10878
No comments yet