Unrated
ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list
ExtUtils::Typemaps::STL::Vector versions before 1.05 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to memory exhaustion.
Announced Group revision 1
Original source ↗CVE-2013-10076
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2013-10076
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/tsee/extutils-typemap-default",
"modules": [
"ExtUtils::Typemaps::STL::Vector"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.05",
"versionType": "custom"
}
],
"packageURL": "pkg:cpan/ExtUtils-Typemaps-Default",
"packageName": "ExtUtils-Typemaps-Default",
"programFiles": [
"lib/ExtUtils/Typemaps/STL/Vector.pm"
],
"collectionURL": "https://cpan.org/modules",
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2013-10076
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #32671 · Revision 1
- Added to Heist Feed
- Publisher date