CVE-2005-3962: perl Numeric Errors

Modified

AliasesRHSA-2005:880DEBIAN-CVE-2005-3962DSA-943-1

Published 01-12-2005Last modified 07-08-2024

Some data may be incomplete

3 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-3962 is a medium (CVSS 4.6) Numeric Errors vulnerability in perl. EPSS estimates a 1.37% chance of exploitation in the next 30 days, higher than 72% of scored vulnerabilities.

Priority

Routine

Not severe (CVSS 4.6, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?

CVSS score

4.6/10

010

Medium · v2.0 (NVD)

EPSS score

1.37%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1

OPENSUSE-SU-2024:11158-1 RHSA-2005:881

Timeline

01-12-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the format string functionality (Perl_sv_vcatpvfn) in Perl 5.9.2 and 5.8.6 Perl allows attackers to overwrite arbitrary memory and possibly execute arbitrary code via format string specifiers with large values, which causes an integer wrap and leads to a buffer overflow, as demonstrated using format string vulnerabilities in Perl applications.

CVSS metrics

1 score · 1 source · 1 version

v2.04.6

EPSS trend

Probability

1.37%

Chance of exploitation in the next 30 days

Percentile

72%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.37% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Version check

Known conditions: local access, no authentication (CVSS vector). Other conditions: not stated in public data.

Redhat3 products

perl< 3:5.8.5-24.RHEL4
perl-debuginfo< 3:5.8.5-24.RHEL4
perl-suidperl< 3:5.8.5-24.RHEL4

Debian1 product

perl< 5.8.4-8sarge3 | < 5.8.7-9

Perl1 product

perl5.8.6 | 5.9.2

3 vendors · 5 products

References

62 links

www.vupen.com/english/advisories/2006/4750VDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1074VDB EntrySignatureX Refsource OVAL
www.kb.cert.org/vuls/id/948385Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.osvdb.org/22255VDB EntryX Refsource OSVDB
secunia.com/advisories/17941Third Party AdvisoryX Refsource SECUNIAVendor Advisory
support.avaya.com/elmodocs2/security/ASA-2006-081.htmX Refsource CONFIRM
www.securityfocus.com/archive/1/418333/100/0/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/438726/100/0/threadedVendor AdvisoryX Refsource HP
marc.info?l=full-disclosure&m=113342788118630&w=2Mailing ListX Refsource FULLDISC
www.vupen.com/english/advisories/2005/2688VDB EntryX Refsource VUPEN

Show all 62 references

www.dyadsecurity.com/perl-0002.htmlX Refsource MISCPatchVendor Advisory
www.osvdb.org/21345VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/15629VDB EntryX Refsource BID
www.redhat.com/support/errata/RHSA-2005-881.htmlVendor AdvisoryX Refsource REDHAT
docs.info.apple.com/article.html?artnum=304829X Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10598VDB EntrySignatureX Refsource OVAL
www.debian.org/security/2006/dsa-943Vendor AdvisoryX Refsource DEBIAN
www.openbsd.org/errata37.htmlVendor AdvisoryX Refsource OPENBSD
secunia.com/advisories/17993Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18075Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/archives/fedora-legacy-announce/2006-February/msg00008.htmlVendor AdvisoryX Refsource FEDORA
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=001056Vendor AdvisoryX Refsource CONECTIVA
www.openpkg.org/security/OpenPKG-SA-2005.025-perl.htmlVendor AdvisoryX Refsource OPENPKG
www.vupen.com/english/advisories/2006/0771VDB EntryX Refsource VUPEN
secunia.com/advisories/20894Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/222-1/Vendor AdvisoryX Refsource UBUNTU
www.vupen.com/english/advisories/2006/2613VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/18413Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/23155Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17762Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18187Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.trustix.org/errata/2005/0070Vendor AdvisoryX Refsource TRUSTIX
secunia.com/advisories/18517Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18295Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2005_71_perl.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/18183Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2005-880.htmlVendor AdvisoryX Refsource REDHAT
lists.apple.com/archives/security-announce/2006/Nov/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.us-cert.gov/cas/techalerts/TA06-333A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
sunsolve.sun.com/search/document.do?assetkey=1-26-102192-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/17952Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2005:225Vendor AdvisoryX Refsource MANDRAKE
www.ipcop.org/index.php?name=News&file=article&sid=41X Refsource CONFIRM
www.gentoo.org/security/en/glsa/glsa-200512-01.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/31208Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17802Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.novell.com/linux/security/advisories/2005_29_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/19041Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17844Third Party AdvisoryX Refsource SECUNIAVendor Advisory
access.redhat.com/errata/RHSA-2005:880Advisory
bugzilla.redhat.com/show_bug.cgi?id=170088REPORT
bugzilla.redhat.com/show_bug.cgi?id=171111REPORT
bugzilla.redhat.com/show_bug.cgi?id=172327REPORT
bugzilla.redhat.com/show_bug.cgi?id=174683REPORT
bugzilla.redhat.com/show_bug.cgi?id=175104REPORT
bugzilla.redhat.com/show_bug.cgi?id=175129REPORT
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_880.jsonAdvisory
access.redhat.com/security/cve/CVE-2005-3962REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617848REPORT
www.cve.org/CVERecord?id=CVE-2005-3962Advisory
nvd.nist.gov/vuln/detail/CVE-2005-3962Advisory
security-tracker.debian.org/tracker/CVE-2005-3962Advisory