CVE-2018-6913: Buffer Overflow
Published Apr 17, 2018
·Updated
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a large item count.
Other sources
Perl. Multiple issues in Perl were addressed with improved memory handling.
Credit
Brian Carpenter, GwanYeong Kim
Affected Software
16 affected componentsFixes available
Apple macOS High Sierra<10.13.6
10.13.6
Apple Sierra
Apple El Capitan
Debian Debian Linux=7.0
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Perl Perl<5.26.2
Canonical Ubuntu Linux=12.04
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=16.04
Canonical Ubuntu Linux=17.10
F5 BIG-IP=17.5.0, >=17.1.0<=17.1.2
17.5.117.1.3
F5 BIG-IP>=16.1.0<=16.1.6
F5 BIG-IP>=15.1.0<=15.1.10
F5 BIG-IQ Centralized Management>=8.2.0<=8.4.0
debian/perl
5.32.1-4+deb11u35.32.1-4+deb11u45.36.0-7+deb12u35.36.0-7+deb12u25.40.1-65.40.1-7
Remediation
Event History
Apr 17, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Data Sourced
via NVD·08:29 PM
DescriptionSeverityWeaknessAffected Software
Jan 11, 2024
Data Sourced
via Launchpad·11:09 PM
Description
Oct 1, 2024
Advisory Published
via F5·09:26 PM
Data Sourced
via F5·09:26 PM
DescriptionSeverityWeaknessAffected Software
Feb 19, 2026
Data Sourced
via Ubuntu·12:13 AM
RemedyDescriptionSeverityAffected Software
Feb 20, 2026
Data Sourced
via Debian·12:15 AM
DescriptionAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4470
- CVE-2018-4289
- CVE-2018-4268
- CVE-2018-4285
- CVE-2018-5383
- CVE-2018-4293
- CVE-2018-4269
- CVE-2018-4276
- CVE-2018-4178
- CVE-2018-4456
- CVE-2018-4283
- CVE-2018-3665
- CVE-2018-4259
- CVE-2018-4286
- CVE-2018-4287
- CVE-2018-4288
- CVE-2018-4291
- CVE-2018-4280
- CVE-2018-4248
- CVE-2018-4277
- CVE-2018-6797
- CVE-2018-6913
- CVE-2017-0898
- CVE-2017-10784
- CVE-2017-14033
- CVE-2017-14064
- CVE-2017-17405
- CVE-2017-17742
- CVE-2018-6914
- CVE-2018-8777
- CVE-2018-8778
- CVE-2018-8779
- CVE-2018-8780
- CVE-2018-4274
Frequently Asked Questions
1
What is CVE-2018-6913?
CVE-2018-6913 is a vulnerability in Perl that allows attackers to execute arbitrary code through a heap-based buffer overflow in the pack function.
2
How severe is CVE-2018-6913?
CVE-2018-6913 is classified as critical with a severity rating of 9.8.
3
Which software versions are affected by CVE-2018-6913?
Perl versions before 5.26.2 are affected by CVE-2018-6913.
4
How can I fix CVE-2018-6913?
To fix CVE-2018-6913, update Perl to version 5.26.2 or later.
5
Where can I find more information about CVE-2018-6913?
You can find more information about CVE-2018-6913 on the MITRE CVE database and the Ubuntu security notices.