CVE-2008-1927

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-24 · updated 2026-06-16
Weakness: CWE-399

Description

Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.

Affected products

perl: 5.8.8

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=454792
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2008-08/msg00006.html
http://osvdb.org/44588
http://rt.perl.org/rt3/Public/Bug/Display.html?id=48156
http://secunia.com/advisories/29948
http://secunia.com/advisories/30025
http://secunia.com/advisories/30326
http://secunia.com/advisories/30624
http://secunia.com/advisories/31208
http://secunia.com/advisories/31328
http://secunia.com/advisories/31467

Get alerted when CVE-2008-1927 or the next vulnerability affects your stack