CVE-2020-12723 @ morris
Status
new
Priority
7.0
Match score
4.0
Risk
DoS
Remote
CVSS
7.5 HIGH
Reason
cpe: perl; pkgs: perl; version: in-range: perl-5.16.3-299.0.1.el7_9.tuxcare.els1, perl-archive-extract-0.68-3.el7, perl-archive-tar-1.92-3.el7, perl-autodie-2.16-2.el7, perl-b-lint-1.17-3.el7, perl-business-isbn-2.06-2.el7; risk:dos
Created
2026-10-15T10:20:43Z
Updated
2026-10-20T10:18:51Z
Package interrogation (copy)
Run on the host — click to copy a command. RPM
| Package | Commands |
|---|---|
| perl-5.16.3-299.0.1.el7_9.tuxcare.els1 | |
| perl-archive-extract-0.68-3.el7 | |
| perl-archive-tar-1.92-3.el7 | |
| perl-autodie-2.16-2.el7 | |
| perl-b-lint-1.17-3.el7 | |
| perl-business-isbn-2.06-2.el7 | |
| cpanel-perl-536-5.36.0-10.cp108~el7 | |
| cpanel-perl-536-algorithm-dependency-1.112-1.cp108~el7 | |
| cpanel-perl-536-algorithm-diff-1.201-1.cp108~el7 | |
| cpanel-perl-536-aliased-0.34-1.cp108~el7 | |
| cpanel-perl-536-amazon-s3-0.54-1.cp108~el7 | |
| cpanel-perl-536-anyevent-7.17-1.cp108~el7 | |
| cpanel-perl-536-apache-logformat-compiler-0.36-1.cp108~el7 | |
| cpanel-perl-536-app-cmd-0.334-1.cp108~el7 | |
| cpanel-perl-536-app-cmddispatch-0.44-1.cp108~el7 | |
| cpanel-perl-536-appconfig-1.71-1.cp108~el7 | |
| cpanel-perl-536-app-cpanminus-1.7046-1.cp108~el7 | |
| cpanel-perl-536-archive-any-0.0946-1.cp108~el7 | |
| cpanel-perl-536-archive-extract-0.88-1.cp108~el7 | |
| cpanel-perl-536-archive-tar-builder-2.5005-1.cp108~el7 | |
| cpanel-perl-536-archive-tar-stream-0.02-1.cp108~el7 | |
| cpanel-perl-536-archive-tar-wrapper-0.38-1.cp108~el7 | |
| cpanel-perl-536-archive-zip-1.68-1.cp108~el7 | |
| cpanel-perl-536-authen-libwrap-0.23-1.cp108~el7 | |
| cpanel-perl-536-authen-pam-0.16-1.cp108~el7 | |
| cpanel-perl-536-authen-sasl-2.16-1.cp108~el7 | |
| cpanel-perl-536-bareword-filehandles-0.007-1.cp108~el7 | |
| cpanel-perl-536-b-c-5.036001-1.cp108~el7 | |
| cpanel-perl-536-b-cow-0.004-1.cp108~el7 | |
| cpanel-perl-536-b-debug-1.26-1.cp108~el7 | |
| cpanel-perl-536-b-flags-0.17-1.cp108~el7 | |
| cpanel-perl-536-b-hooks-endofscope-0.26-1.cp108~el7 | |
| cpanel-perl-536-b-hooks-op-check-0.22-1.cp108~el7 | |
| cpanel-perl-536-b-keywords-1.24-1.cp108~el7 | |
| cpanel-perl-536-b-lint-1.20-1.cp108~el7 | |
| cpanel-perl-536-bsd-resource-1.2911-1.cp108~el7 |
Inventory lookup
Search package inventory across systems, then return here. Create a ticket on systems the matcher missed.
Suggestions: perl · perl-archive-extract · perl-archive-tar · perl-autodie · perl-b-lint · perl-business-isbn
| System | Matches | Ticket for CVE-2020-12723 | |
|---|---|---|---|
| Archive | libalgorithm-diff-perl 1.19.03-2; libalgorithm-diff-xs-perl 0.04-5+b1; libalgorithm-merge-perl 0.08-3; libbit-vector-perl 7.4-1+b5; libcarp-clan-perl 6.07-1; libdate-calc-perl 6.4-1; libdate-calc-xs-perl 6.4-1+b4; libdate-manip-perl 6.76-1 (+14 more) | new open | |
| Janus | liberror-perl 0.17027-2; libio-socket-inet6-perl 2.72-2; liblocale-gettext-perl 1.07-3+b4; libnet-snmp-perl 6.0.1-5; libperl5.28 5.28.1-6+deb10u1; libsnmp-session-perl 1.14~git20130523.186a005-4; libsocket6-perl 0.29-1+b1; libtext-charwidth-perl 0.04-7.1+b1 (+5 more) | new open | |
| Library | libbit-vector-perl 7.4-1+b2; libcarp-clan-perl 6.06-1; libcgi-fast-perl 1:2.12-1; libcgi-pm-perl 4.35-1; libconfig-inifiles-perl 2.94-1; libdate-calc-perl 6.4-1; libdate-calc-xs-perl 6.4-1+b2; libdate-manip-perl 6.57-1 (+28 more) | new open | |
| Saiph | libalgorithm-diff-perl 1.19.03-2; libalgorithm-diff-xs-perl 0.04-5+b1; libalgorithm-merge-perl 0.08-3; libbit-vector-perl 7.4-1+b5; libcarp-clan-perl 6.07-1; libcgi-fast-perl 1:2.13-1; libcgi-pm-perl 4.40-1; libconfig-inifiles-perl 3.000001-1 (+33 more) | new open | |
| morris | cpanel-perl-536 5.36.0; cpanel-perl-536-algorithm-dependency 1.112; cpanel-perl-536-algorithm-diff 1.201; cpanel-perl-536-aliased 0.34; cpanel-perl-536-amazon-s3 0.54; cpanel-perl-536-anyevent 7.17; cpanel-perl-536-apache-logformat-compiler 0.36; cpanel-perl-536-app-cmd 0.334 (+755 more) | new open | |
| mufasa | cpanel-perl-536 5.36.0; cpanel-perl-536-algorithm-dependency 1.112; cpanel-perl-536-algorithm-diff 1.201; cpanel-perl-536-aliased 0.34; cpanel-perl-536-amazon-s3 0.54; cpanel-perl-536-anyevent 7.17; cpanel-perl-536-apache-logformat-compiler 0.36; cpanel-perl-536-app-cmd 0.334 (+751 more) | new open | |
| Bullseye | liblocale-gettext-perl 1.07-4+b1; libperl5.32 5.32.1-4+deb11u5; libtext-charwidth-perl 0.04-10+b1; libtext-iconv-perl 1.7-7+b1; libtext-wrapi18n-perl 0.06-9; perl 5.32.1-4+deb11u5; perl-base 5.32.1-4+deb11u5; perl-modules-5.32 5.32.1-4+deb11u5 | none | |
| Helios | libalgorithm-diff-perl 1.201-1; libalgorithm-diff-xs-perl 0.04-6+b1; libalgorithm-merge-perl 0.08-3; libdpkg-perl 1.20.13; libfile-fcntllock-perl 0.22-3+b7; libio-socket-inet6-perl 2.72-2.1; liblocale-gettext-perl 1.07-4+b1; libnet-snmp-perl 6.0.1-6 (+9 more) | none | |
| Matrix | libapt-pkg-perl 0.1.40+b2; libauthen-sasl-perl 2.1600-3; libb-hooks-op-check-perl 0.22-2+b1; libbytes-random-secure-perl 0.29-4~deb13u1~deb12u1; libcapture-tiny-perl 0.48-2; libclass-accessor-perl 0.51-2; libclass-isa-perl 0.36-7; libclone-perl 0.46-1 (+97 more) | none | |
| Silk | libalgorithm-c3-perl 0.11-2; libalgorithm-diff-perl 1.201-1; libalgorithm-diff-xs-perl 0.04-8+b1; libalgorithm-merge-perl 0.08-5; libauthen-pam-perl 0.16-5+b1; libauthen-sasl-perl 2.1600-3; libb-hooks-endofscope-perl 0.26-1; libb-hooks-op-check-perl 0.22-2+b1 (+101 more) | none |
Related CVE (same fix)
Point this ticket’s CVE at a higher-priority / same-fix primary so you only triage one.
Host OS / kernel
OS
CloudLinux release 7.9 (Boris Yegorov)
(7.9)
· cloudlinux
Arch
x86_64
kernel_release
uname -r → 3.10.0-962.3.2.lve1.5.89.el7.x86_64kernel_version
uname -v → #1 SMP Thu Jul 9 15:55:31 UTC 2026For Linux kernel CVEs, kernel_version (Debian packaging / build string) often decides fixed vs not; kernel_release is used for upstream NVD range compares.
Same CVE on other hosts
Open the ticket for this CVE on another system.
| System | Status | Priority | Updated | |
|---|---|---|---|---|
| mufasa | new | 7.0 | 2026-10-20T10:18:51Z | Open |
| Library | new | 1.75 | 2026-10-20T10:18:51Z | Open |
| Archive | new | 0.62 | 2026-10-20T10:18:51Z | Open |
| Janus | new | 0.62 | 2026-10-20T10:18:51Z | Open |
| Saiph | new | 0.62 | 2026-10-20T10:18:51Z | Open |
Description
regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Update status
Add note only
References
- http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00044.html
- https://github.com/Perl/perl5/blob/blead/pod/perl5303delta.pod
- https://github.com/Perl/perl5/compare/v5.30.2...v5.30.3
- https://github.com/Perl/perl5/issues/16947
- https://github.com/Perl/perl5/issues/17743
- https://github.com/perl/perl5/commit/66bbb51b93253a3f87d11c2695cfb7bdb782184a
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN3TTBO5KSGWE5IRIKDJ5JSQRH7ANNXE/
- https://security.gentoo.org/glsa/202006-03
- https://security.netapp.com/advisory/ntap-20200611-0001/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
NVD: CVE-2020-12723