CVE-2020-12723 @ Archive

"CVE-2020-12723"
"perl-5.28.1-6+deb10u1"
"perl-base-5.28.1-6+deb10u1"
"perl-doc-5.28.1-6+deb10u1"
"perl-modules-5.24-5.24.1-3+deb9u7"
"perl-modules-5.28-5.28.1-6+deb10u1"
"libalgorithm-diff-perl-1.19.03-2"
"libalgorithm-diff-xs-perl-0.04-5+b1"
"libalgorithm-merge-perl-0.08-3"
"libbit-vector-perl-7.4-1+b5"
"libcarp-clan-perl-6.07-1"
"libdate-calc-perl-6.4-1"
"libdate-calc-xs-perl-6.4-1+b4"
"libdate-manip-perl-6.76-1"
"libdpkg-perl-1.20.10"
"libfile-fcntllock-perl-0.22-3+b5"
"libfile-tail-perl-1.3-5"
"Am I vulnerable?"

Status

new

Priority

0.62

Match score

4.0

Risk

DoS Remote

CVSS

7.5 HIGH

Reason

cpe: perl; pkgs: perl; version: in-range: perl-5.28.1-6+deb10u1, perl-base-5.28.1-6+deb10u1, perl-doc-5.28.1-6+deb10u1, perl-modules-5.24-5.24.1-3+deb9u7, perl-modules-5.28-5.28.1-6+deb10u1; risk:dos

Created

2026-10-15T10:20:43Z

Updated

2026-10-20T10:18:51Z

Package interrogation (copy)

Run on the host — click to copy a command. Debian/apt

Package	Commands
perl-5.28.1-6+deb10u1
perl-base-5.28.1-6+deb10u1
perl-doc-5.28.1-6+deb10u1
perl-modules-5.24-5.24.1-3+deb9u7
perl-modules-5.28-5.28.1-6+deb10u1
libalgorithm-diff-perl-1.19.03-2
libalgorithm-diff-xs-perl-0.04-5+b1
libalgorithm-merge-perl-0.08-3
libbit-vector-perl-7.4-1+b5
libcarp-clan-perl-6.07-1
libdate-calc-perl-6.4-1
libdate-calc-xs-perl-6.4-1+b4
libdate-manip-perl-6.76-1
libdpkg-perl-1.20.10
libfile-fcntllock-perl-0.22-3+b5
libfile-tail-perl-1.3-5
liblocale-gettext-perl-1.07-3+b4
libperl5.28-5.28.1-6+deb10u1
libtext-charwidth-perl-0.04-7.1+b1
libtext-iconv-perl-1.7-5+b7
libtext-wrapi18n-perl-0.06-7.1
libtimedate-perl-2.3000-2+deb10u1

Inventory lookup

Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.

Suggestions: perl · perl-base · perl-doc · perl-modules

System	Matches	Ticket for CVE-2020-12723
Archive	libalgorithm-diff-perl 1.19.03-2; libalgorithm-diff-xs-perl 0.04-5+b1; libalgorithm-merge-perl 0.08-3; libbit-vector-perl 7.4-1+b5; libcarp-clan-perl 6.07-1; libdate-calc-perl 6.4-1; libdate-calc-xs-perl 6.4-1+b4; libdate-manip-perl 6.76-1 (+14 more)	new open
Janus	liberror-perl 0.17027-2; libio-socket-inet6-perl 2.72-2; liblocale-gettext-perl 1.07-3+b4; libnet-snmp-perl 6.0.1-5; libperl5.28 5.28.1-6+deb10u1; libsnmp-session-perl 1.14~git20130523.186a005-4; libsocket6-perl 0.29-1+b1; libtext-charwidth-perl 0.04-7.1+b1 (+5 more)	new open
Library	libbit-vector-perl 7.4-1+b2; libcarp-clan-perl 6.06-1; libcgi-fast-perl 1:2.12-1; libcgi-pm-perl 4.35-1; libconfig-inifiles-perl 2.94-1; libdate-calc-perl 6.4-1; libdate-calc-xs-perl 6.4-1+b2; libdate-manip-perl 6.57-1 (+28 more)	new open
Saiph	libalgorithm-diff-perl 1.19.03-2; libalgorithm-diff-xs-perl 0.04-5+b1; libalgorithm-merge-perl 0.08-3; libbit-vector-perl 7.4-1+b5; libcarp-clan-perl 6.07-1; libcgi-fast-perl 1:2.13-1; libcgi-pm-perl 4.40-1; libconfig-inifiles-perl 3.000001-1 (+33 more)	new open
morris	cpanel-perl-536 5.36.0; cpanel-perl-536-algorithm-dependency 1.112; cpanel-perl-536-algorithm-diff 1.201; cpanel-perl-536-aliased 0.34; cpanel-perl-536-amazon-s3 0.54; cpanel-perl-536-anyevent 7.17; cpanel-perl-536-apache-logformat-compiler 0.36; cpanel-perl-536-app-cmd 0.334 (+755 more)	new open
mufasa	cpanel-perl-536 5.36.0; cpanel-perl-536-algorithm-dependency 1.112; cpanel-perl-536-algorithm-diff 1.201; cpanel-perl-536-aliased 0.34; cpanel-perl-536-amazon-s3 0.54; cpanel-perl-536-anyevent 7.17; cpanel-perl-536-apache-logformat-compiler 0.36; cpanel-perl-536-app-cmd 0.334 (+751 more)	new open
Bullseye	liblocale-gettext-perl 1.07-4+b1; libperl5.32 5.32.1-4+deb11u5; libtext-charwidth-perl 0.04-10+b1; libtext-iconv-perl 1.7-7+b1; libtext-wrapi18n-perl 0.06-9; perl 5.32.1-4+deb11u5; perl-base 5.32.1-4+deb11u5; perl-modules-5.32 5.32.1-4+deb11u5	none
Helios	libalgorithm-diff-perl 1.201-1; libalgorithm-diff-xs-perl 0.04-6+b1; libalgorithm-merge-perl 0.08-3; libdpkg-perl 1.20.13; libfile-fcntllock-perl 0.22-3+b7; libio-socket-inet6-perl 2.72-2.1; liblocale-gettext-perl 1.07-4+b1; libnet-snmp-perl 6.0.1-6 (+9 more)	none
Matrix	libapt-pkg-perl 0.1.40+b2; libauthen-sasl-perl 2.1600-3; libb-hooks-op-check-perl 0.22-2+b1; libbytes-random-secure-perl 0.29-4~deb13u1~deb12u1; libcapture-tiny-perl 0.48-2; libclass-accessor-perl 0.51-2; libclass-isa-perl 0.36-7; libclone-perl 0.46-1 (+97 more)	none
Silk	libalgorithm-c3-perl 0.11-2; libalgorithm-diff-perl 1.201-1; libalgorithm-diff-xs-perl 0.04-8+b1; libalgorithm-merge-perl 0.08-5; libauthen-pam-perl 0.16-5+b1; libauthen-sasl-perl 2.1600-3; libb-hooks-endofscope-perl 0.26-1; libb-hooks-op-check-perl 0.22-2+b1 (+101 more)	none

Related CVE (same fix)

Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.

Host OS / kernel

Debian GNU/Linux 10 (buster) (10) · debian

Arch

x86_64

kernel_release

uname -r → 5.10.0-25-amd64

kernel_version

uname -v → #1 SMP Debian 5.10.191-1 (2023-08-16)

For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.

Same CVE on other hosts

Open the ticket for this CVE on another system.

System	Status	Priority	Updated
morris	new	7.0	2026-10-20T10:18:51Z	Open
mufasa	new	7.0	2026-10-20T10:18:51Z	Open
Library	new	1.75	2026-10-20T10:18:51Z	Open
Janus	new	0.62	2026-10-20T10:18:51Z	Open
Saiph	new	0.62	2026-10-20T10:18:51Z	Open

Description

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Update status

Add note only

References

NVD: CVE-2020-12723