ZeroDay Findings
Sign inSign up

Findings

CVE-2020-12723

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Published Jun 5, 2020 · updated Oct 14, 2026 · perl perl

regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 5, 2020 · NIST NVD

    Detected

    regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

  2. Oct 14, 2026 · NIST NVD

    Updated

    regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

Affected

  • cpe fedoraproject/fedora31
  • cpe netapp/oncommand workflow automationversion unspecified
  • cpe netapp/snap creator frameworkversion unspecified
  • cpe opensuse/leap15.1
  • cpe oracle/communications billing and revenue management12.0.0.2.0
  • cpe oracle/communications billing and revenue management12.0.0.3.0
  • cpe oracle/communications diameter signaling routerversion unspecified
  • cpe perl/perlversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2020-12723

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2020-12723

    30-day exploitation probability 6.0%

    first.org
  • NIST NVDVulnerability recordCVE-2020-12723

    regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.

    nvd.nist.gov

References