Skip to content

Commit f73d8b6

Browse files
committed
CVE-2022-48522 S_find_uninit_var
1 parent 159a466 commit f73d8b6

File tree

1 file changed

+14
-0
lines changed

1 file changed

+14
-0
lines changed

cpansa/CPANSA-perl.yml

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -995,3 +995,17 @@
995995
- https://www.oracle.com/security-alerts/cpujul2020.html
996996
reported: 2017-09-28
997997
severity: critical
998+
- affected_versions: '>=5.34.0'
999+
cves:
1000+
- CVE-2022-48522
1001+
description: >
1002+
In Perl 5.34.0, function S_find_uninit_var in sv.c has a
1003+
stack-based crash that can lead to remote code execution or local
1004+
privilege escalation.
1005+
distribution: perl
1006+
fixed_versions: ~
1007+
id: CPANSA--2022-48522
1008+
references:
1009+
- https://github.com/Perl/perl5/blob/79a7b254d85a10b65126ad99bf10e70480569d68/sv.c#L16336-L16345
1010+
reported: 2023-08-22
1011+
severity: ~

0 commit comments

Comments
 (0)