IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-04-21 16:16

MODIFIED

2026-04-21 16:20

EPSS (Prob. Exploit)

0.64%

Top 49.0%

DATA SOURCES:

NVD 🔗 2026-04-21 RED HAT 🔗 2026-04-26 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-02 MSRC 🔗 2026-11-02

> DESCRIPTION

Storable versions before 3.05 for Perl has a stack overflow. The retrieve_hook function stored the length of the class name into a signed integer but in read operations treated the length as unsigned. This allowed an attacker to craft data that could trigger the overflow.

> AFFECTED_PRODUCTS

Red Hat - Red Hat Hardened Images

Version: 3.37

> WEAKNESSES

CWE-121

> CWE DETAILED DESCRIPTIONS

CWE-121: Stack-based Buffer Overflow - The product writes past the end of a buffer that was allocated on the stack.

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY

Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:

Unknown / Unknown

134 versions affected

> HISTORIQUE DES MODIFICATIONS

Première apparition

21/04/2026 16:16

Source: NVD

📊 ENRICHISSEMENT 01/11/2026 06:59

CWE

Champ modifié: Description CWE

Ancienne valeur:

CWE-121: Stack-based Buffer Overflow - A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a para...

Nouvelle valeur:

CWE-121: Stack-based Buffer Overflow - The product writes past the end of a buffer that was allocated on the stack.

📊 ENRICHISSEMENT 01/05/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

📊 ENRICHISSEMENT 26/04/2026 05:01

REDHAT

Champ modifié: Sévérité Red Hat

Ancienne valeur: